It maintains the high efficiency of the original MQV protocol, requiring only slightly more computation than a standard unauthenticated Diffie-Hellman exchange.
It was the first protocol of its kind to be proven secure in the Canetti-Krawczyk (CK) model , which accounts for various realistic attack scenarios, including the leakage of ephemeral session keys. HMQV: A High-Performance Secure Diffie-Hellman ...
It is designed to resist specific vulnerabilities like Key-Compromise Impersonation (KCI) and provides Perfect Forward Secrecy (PFS) when configured correctly. Legacy and Impact It maintains the high efficiency of the original