It just occurred to me that for WriteMessage the spec says: For "e": Sets e = GENERATE_KEYPAIR(). Appends EncryptAndHash(e.public_key) to the buffer. If the user passes "new_e" to Initialize, it will immediately get overwritten when the "e" token is encountered. Is this intended? Should it instead say something like, "If e is unset, set e = GENERATE_KEYPAIR()." ? -- Alex