Oakley Key Determination Protocol

• Refinement of the Diffe-Hellman key exchange algorithm

• Two users A and B agree on two global parameters: q, a large prime number and , a primitive root of q (see p.68)

• Secret keys created only when needed

• Exchange requires no preexisting infrastructure

• Disadvantage: Subject to MITM attack