// definition
Forward secrecy
Protecting earlier exchanges after a later compromise
Short definition
A cryptographic property limiting the effect of a later compromise of secrets on earlier exchanges. Its guarantee depends on the protocol, the mode used and deletion of the secrets needed to reconstruct earlier keys. Histories retained or backed up by the application have their own protection. Protecting future exchanges after a compromise is the separate property of post-compromise security.
risk atlas
Knowledge map
Related analyses
Primary sources
- IETF, RFC 9846, TLS 1.3July 2026: forward-secrecy properties and limits depend on the protocol mode.
- Signal, Double Ratchet specification, revision 44 November 2025: key evolution, deletion and recovery after compromise.