A property where compromise of long-term keys does not expose past session keys or previously captured traffic.