I requested Whitfield Diffie to briefly comment on a Diffie-Hellman scheme that only performs signatures on the sender's exponentials, as appears in the current draft of Photuris. Here is his response. Ashar. ----- Begin Included Message -----