forward secrecy in mixmaster

[Germano Caronni]

Matthew Ghio wrote:
> > I agree it does not make much difference mathematically, but one DH modulus
> > always makes me uneasy. DH is still patented though. I think I will continue
> > to use RSAREF, but compose the standard so the protocol supports unlimited
> > key sizes.
  
Just a short note. The DH patent (#4200770), as held by Cylink expires at
the 29th of april '97. Afterwards DH enters the public domain. That's a
certain argument for using DH key exchange. RSA will go into the public
domain somewhen in 2002, if I remember correctly.

Germano