Better key negotiations

[Watson Ladd]

There exists a secure protocol(Diffie-Hellman) with 2 modular  
exponentiation operations for negotiating a key with no  
authentication. There exists a secure protocol(SPEKE, SRP, EKE..)  
with 2 exponentiations for negotiating a key with mutual  
authentication. Doesn't this suggest the existence of a 2  
exponentiation protocol for authenticating only one side? Does one  
exist? It would be an improvement over what's now used with three  
exponentiations by the server.

Sincerely,
Watson Ladd
---
"Those who would give up Essential Liberty to purchase a little  
Temporary Safety deserve neither  Liberty nor Safety."
-- Benjamin Franklin 


-------------- next part --------------
A non-text attachment was scrubbed...
Name: PGP.sig
Type: application/pgp-signature
Size: 186 bytes
Desc: This is a digitally signed message part
URL: <http://lists.torproject.org/pipermail/tor-talk/attachments/20060612/7d69ad75/attachment.pgp>