Features of Oakley

• Employs cookies to thwart clogging attacks

• Two parties can negotiate a group (modular exponentiation or elliptic curves)

• Uses nonces to ensure against replay attacks

• Enables the exchange of Diffie-Hellman public key values

• Authenticates the Diffie-Hellman exchange to thwart MITM attacks