The confidence that the compromise of a long-term private key does not compromise any earlier session keys.