[Cryptography] Are there other anonymous key exchange algorithms?

[Miroslav Kratochvil]

Hello list,

so there has recently been a discussion about solving some previously
unsolvable examples of discrete logarithm on slashdot [1] (not
particularly harmful for cryptography though), which mostly made me to
finally ask about this.

The big question:
Is there any other anonymous key exchange algorithm than Diffie-Hellman?

Or any other good method (preferably post-quantum) that would allow
perfect forward secrecy without D-H?

Thanks in advance,
-mk


[1] http://beta.slashdot.org/story/202151