- Both hosts have just their public and private key pair (but they do not have the other party’s public key). Bob should be authenticated
- Assume that the two hosts share clocks that are synced, i.e timestamps can be used.
I have not found any way to do this without some kind of intermediary. My best bet so far is to use the Needham-Schroeder protocol with timestamps in order to prevent replay attacks and authenticate Bob. That is, a third party provides Alice and Bob with a shared key (after both have proven their identity to the third party) that they then use to verify each other. I feel though that there should be some solution that uses the public keys. Any help would be greatly appreciated.