Skip to content
Discussion options

You must be logged in to vote

The STREAM key remains the same throughout the stream, with only the non-secret nonce changing, so there is no future secrecy.

age is made for encrypting files, not long-lived streams. Even many TLS implementations don't provide future secrecy within a single connection (despite rekey being supported by the protocol). For this, you might want to use Noise with Rekey or TLS with forced KeyUpdates.

Replies: 1 comment 1 reply

Comment options

You must be logged in to vote
1 reply
@handpickencounter
Comment options

Answer selected by FiloSottile
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Category
Q&A
Labels
None yet
2 participants