> I think the simplest answer is not to use the same key for both > directions. This is possible even if a single key negotiation is used. I.e, when the Diffie Hellman "negotiation" is complete, there is at least 512 bilts of common random data at both ends. This is more than enough for 2 symetric keys of almost any algorithm I know of. jim