Forward Secrecy: Ephemeral Diffie-Hellman in IPsec

Quick Answer

Ephemeral Diffie-Hellman, whether the classic DHE or its elliptic-curve variant ECDHE, is what provides forward secrecy because it generates a brand-new, temporary key pair for every single session rather than reusing a long-term key across many sessions. That temporary key is used only to derive that one session's encryption key and is then discarded once the session ends, meaning there's no persistent secret tied to that session sitting around waiting to be compromised later. This matters because the alternative, deriving session keys directly from a long-term static private key, creates a single point of failure: if an attacker ever obtains that long-term key, whether through a breach or years of patient cryptanalysis, they could retroactively decrypt every session ever protected by it, including traffic they recorded and stored long ago. Ephemeral key exchange breaks that link entirely, since each session's key material is independent of the long-term key and independent of every other session's key material; compromising the long-term key in the future tells an attacker nothing about past ephemeral session keys, which no longer exist anywhere. This is why forward secrecy is specifically a property of how keys are exchanged, not of the encryption algorithm itself. Whenever a question asks what enables forward secrecy in IPsec or similar protocols, look for ephemeral or temporary key exchange methods rather than static, long-term key usage.