IMHO ... the MQV key exchange is an excelelnt choice. It would be commonly used if it were not for the patents :-(

-----Original Message----- From: Marcel Popescu [mailto:mdpopescu@subdimension.com] Sent: Thursday, June 27, 2002 7:40 AM To: cypherpunks@lne.com Subject: Diffie-Hellman and MITM

Is there a defense against MITM for Diffie-Hellman? Is there another protocol with equivalent properties, with such a defense? (Secure communications between two parties, with no shared secret and no out-of-band abilities, on an insecure network.)

Thanks, Mark

http://grouper.ieee.org/groups/1363/ Yahoo! - Official partner of 2002 FIFA World Cup http://fifaworldcup.yahoo.com