The new one is randomly chosen (with the randomness coming from both parties, an... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

Sesse__ 8 months ago | parent | context | favorite | on: Signal Protocol and Post-Quantum Ratchets

The new one is randomly chosen (with the randomness coming from both parties, and then combined using ECDH and/or KEM). So you cannot predict it from previous key material, pretty much by definition.

immibis 8 months ago [–]

They also don't know the random elements used in previous headers, since they're thrown away a few rounds after the message was decrypted.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact