Use Cases of Otway Rees key exchange protocol I am working on an seminar paper regarding key exchange protocols. Of course my first choice of protocol was DH. Second, I choose Otway Rees protocol since I found it very interesting that there is not much literature existing.

So I did a little bit of research and have some basic knowledge regarding OR-protocol. I thing I somehow couldn't find were applications / use cases of Utway-Rees.

In literature they are talking about that its used for parties to agree on a secret key using TTP in unsafe networks and that its a common thing for VPNs. But one thing I am still missing is: where is implemented? Does it have some applications in TLS/SSL, or IPSec?
No, because the protocol is not secure against replay attacks.

In general, this is much closer to Kerberos (secure and state-of-the-art) or Needham-Schroeder (not secure either) than Diffie-Hellman key exchange, which does not rely on a trusted server. (Note DH alone is also not secure, you need an authenticated variant).

That is probably the reason why you didn't find that much information on the protocol, why there are no common standard references and why it isn't used in cryptographic standards. In any case, Kerberos provides the same functionality with better security properties and it is already widely used.