Just an aside: People have been mentioning eliptic curve analogues of D-H. I also think we might want to pay some added attention to the eliptic curve variants on D-H given the speed improvement they provide, although there is a bit of added implementation complexity. There may also be added patent complexity -- didn't NeXT get a patent on their elliptic curve stuff?