[MLS] security analysis of last-resort KeyPackages?

[Rohan Mahy <[e-mail]>]

Hi,
The architecture document mentions last-resort KeyPackages in this section
<https://www.ietf.org/archive/id/draft-ietf-mls-architecture-10.html#name-key-storage-and-retrieval>,
but doesn't really give guidance on why it is a bad idea. Does anyone have
a link to a paper or analysis of the security implications? My
understanding is that this is much worse from a security perspective than
having last-resort keying material in DoubleRatchet.

Thanks,
-rohan

*Rohan Mahy  *l  Vice President Engineering, Architecture

Chat: @rohan_wire on Wire



Wire <https://wire.com/en/download/> - Secure team messaging.

*Zeta Project Germany GmbH  *l  Rosenthaler Straße 40,
<https://maps.google.com/?q=Rosenthaler+Stra%C3%9Fe+40,%C2%A0+10178+Berlin,%C2%A0+Germany&entry=gmail&source=g>10178
Berlin,
<https://maps.google.com/?q=Rosenthaler+Stra%C3%9Fe+40,%C2%A0+10178+Berlin,%C2%A0+Germany&entry=gmail&source=g>
Germany
<https://maps.google.com/?q=Rosenthaler+Stra%C3%9Fe+40,%C2%A0+10178+Berlin,%C2%A0+Germany&entry=gmail&source=g>

Geschäftsführer/Managing Director: Alan Duric, Andre Kiehne

HRB 149847 beim Handelsregister Charlottenburg, Berlin

VAT-ID DE288748675