Key-rotation ratchets Subtopics: ratchet-* TODO: pages for the following Security definitions: past-conf (fwd-sec) vs future-conf (self-heal) Optimisation against a KEX dependency graph