Forward Secrecy in a Reconnectable Protocol: Two Key Pairs Per Session

Why TermOnMac uses a persistent identity key for TOFU and a per-connection ephemeral X25519 key for ECDH — so a stolen identity key cannot decrypt past recorded traffic.