Perfect Forward Secrecy (PFS)

{
  "id": "MLC-T-CYB-003076",
  "term": "Perfect Forward Secrecy (PFS)",
  "field": "Cybersecurity",
  "definition": "1. An option available during quick mode that causes a new shared secret to be created through a Diffie-Hellman exchange for each IPsec SA.\n\n2. An option that causes a new secret key to be created and shared through a new Diffie-Hellman key exchange for each IPsec SA. This provides protection against the use of compromised old keys that could be used to attack the newer derived keys still in use for integrity and confidentiality protection.",
  "abbreviation": "PFS",
  "references": [
    "NIST SP 800-77 [Superseded]",
    "NIST SP 800-77 Rev. 1",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/perfect-forward-secrecy-pfs/"
}