[Cryptography] Are there other anonymous key exchange algorithms?

[Hanno Böck]

On Sat, 17 May 2014 14:29:21 +0200
Miroslav Kratochvil <exa.exa at gmail.com> wrote:

> The big question:
> Is there any other anonymous key exchange algorithm than
> Diffie-Hellman?
> 
> Or any other good method (preferably post-quantum) that would allow
> perfect forward secrecy without D-H?

When you're asking about usable (== well tested and deployed in
real-worl protocols) key exchanges there really is only DH either in
prime fields or elliptic curves.

There exists NTRU-KE [1], but ntru is patented and it should probably
be considere highly experimental.

[1] https://eprint.iacr.org/2013/718.pdf

-- 
Hanno Böck
http://hboeck.de/

mail/jabber: hanno at hboeck.de
GPG: BBB51E42
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: not available
URL: <http://www.metzdowd.com/pipermail/cryptography/attachments/20140517/d2eebb24/attachment.pgp>