A method for a secure handshake protocol between A and B, connected by a slow
channel
is provided in which A sends a first message indicating a set of cipher suites
with parameters, and its identifier and B selects a cipher suite, obtains A's certificate
over a fast connection, verifies A's certificate and obtains A's public key. Next
B sends a second message comprising B's certificate, and an indication that B has
verified A's certificate, and an indication about the selected cipher suite. A
begins to use the selected cipher suite, verifies B's certificate and obtains B's
public key. Next A sends a third message indicating that A has verified B's certificate.