Session Key Management
cTLS uses ephemeral session keys for forward secrecy. Keys exist only in Verifier RAM and are destroyed on shutdown.Session Keys Structure
Forward Secrecy Guarantees
This means:- Each Verifier restart generates fresh keys
- Past communications cannot be decrypted even if storage is compromised
- Agents must re-register after Verifier restarts