F-fsAEAD — Forward-secure AEAD

F-fsAEAD (Forward-secure AEAD) is part of Cryptographic Library and Symmetric Primitives in the UC functionality encyclopedia. Status: a canonical, well-established UC functionality.

Introduced as one piece of a decomposition of the Signal protocol, alongside F-secmsg and F-CKE.

References:

• Canetti et al. Universally composable end-to-end secure messaging. In Advances in Cryptology – CRYPTO 2022, volume 13508 of LNCS, 2022.