Extended authenticated key exchange with key confirmation is described. In
one aspect, and before computing session keys to exchange information
securely between an initiator and a responder, each party of the
initiator and the responder, confirms whether the other party has
received corresponding information to generate a valid session key. If
either party determines that the other respective party has not received
the corresponding information, the party terminates the extended
authenticated key exchange with key confirmation protocol. Otherwise,
when a party determines that the other party has received the
corresponding information, the party generates a respective session key.
In this manner, when both parties confirm that the other party has
received the appropriate information for session key generation, both
parties are assured that information can be exchanged between the parties
securely using the session keys.