In PFS, session keys are unique keys generated for each VPN session. These session keys are short-lived. During the key exchange, the client and server independently generate their session keys based on a combination of private and public keys.