Answers are grounded in this paper and cite their sources.
Certain key establishment protocols specified in an international standard and a draft international standard are considered. These protocols are all intended to provide joint key control, i.e. the protocols are designed to prevent either party choosing the key value. It is shown that this claim is suspect for most of the protocols concerned.
No takes yet. Share an insight, caveat, or question.
Mitchell et al. (1998) studied this question.
Synapse has enriched 5 related papers. Consider them for comparative context: