An attacker has recorded months of Alice's encrypted messages, then finally steals the current session key from her phone. In a system offering forward secrecy, what can they decrypt?
