The idea that any message encrypted with a past key cannot be decrypted to find its old message