The main thing we didn't cover yesterday: How do we deliver the key? Let's look at xor a minute: Since it's pretty central Does it matter what order we de-xor in? Three-pass protocol I learned it under the name "Triple padlock exchange" Let's try with xor But what could Eve or Trudy do? There IS a way to make this work, but it's not common RSA: Go through example Now that that works: Cryptographic identity verification For login (ssh, etc) One more idea before certificates: Cryptographic hash functions A little fancier than hash table functions Can run slower Certificates and signing And SSH key validation Isoptera has a signed certificate for https, but not ssh Might work, though