@wizzwizz4 Well, Martin Kleppmann writes that the underlying trapdoor function Diffie-Hellman handshakes use must be both!