Proper forward secrecy Currently I have a protocol using a simple RSA to AES handshake. I have been reading more and more and would like to implement proper forward secrecy, but at the same time I'd like to improve the performance on mobile devices.

My question is, where would I start reading / learning about how to implement proper ECDHE ( as this seems to be the preferred choice ) and how to properly implement it?

The documentation on OpenSSL seems to be rather unfinished and annoying to work with.
I'd recommend you to read those two documents:


RFC 6090: Fundamental Elliptic Curve Cryptography Algorithms - describes all the fundamental operations in ECC algorithms (including ECDH), and includes references to further readings with more details.
The security impact of a new cryptographic library - explains design and implementation decisions behind NaCl, an OpenSSL alternative from Daniel J. Bernstein.