Authenticated key agreementAuthenticated Key Agreement • January 10th, 2021
) This attack cannot be detected unless A and B have some long-term keys that are known to each other or compare their keys out of band.