On Sat, 9 Jan 2016 18:46:40 +0100 "Jason A. Donenfeld" <Jason at zx2c4.com> wrote: > The reason is that the ephemeral keys act as random salts for > subsequent encryptions. If this isn't in place, catastrophic key reuse > will occur. Could you clarify? What is the specific rule governing the order in which DH operations should take place? -- Alex