> > I thought that using RSA to exchange keys would introduce a "simple"
> about the cryptographic functionality and soundnes of these protocols).
> be incorporated and used but now it is not the time.
> > rather than detract from it.
> an attacker that finds your RSA private key CANNOT read all your traffic.
> It rather needs the private keys of BOTH sides to the exchange.
> > but must not be encrypted with the same key as before?
> session (as the derivation involves fresh per-session nonces).