Abstract To mitigate state exposure threats to long-lived instant messaging sessions, ratcheting was introduced, which is used in practice protocols like Signal. However, existing generally come with a high cost. Recently, Caforio et al. proposed pragmatic constructions, compose weakly secure ‘light’ protocol and strongly ‘heavy’ protocol, order achieve so-called on-demand. The light they has s...