#cryptography nerds: what would you call the analogous property to forward secrecy in a protocol that only does authentication (so no secrecy)?
For example, let’s suppose I send a stream of audit log messages signed in batches with an EdDSA key. I could rotate that key after every batch, (including the next PK in the previous signed batch). Thus a compromise of the signing key at time t allows forging future records but not altering prior records.
NIST calls this “backtracking resistance” in the context of DRBGs, which could work as a generic term. Is there any other term in wide use?