In message <199709250901.MAA04293@ee.technion.ac.il>, Hugo Krawczyk writes: > However, Moni Naor pointed out to me that this last form may not > provide all the mixing of Ni and Nr Can we *please* get these protocols stable and published? In other words, stop changing it unless "may not" becomes "must not". -- Harald Koch