A.Yu. Nesterenko

We present a new variant of Diffie-Hellman protocol, which is realized in a group of points of elliptic curve over finite field and contains a possibility of key confirmation. An important feature of this protocol is mutual authentication of protocol entities. We make some security demands to the protocol such as key security, long-term keys security, known key security, forward secrecy, key compromise impersonation, unknown key sharing and no key control. We show that our protocol are meets our expectations. We present defence methods and show that protocol compromising, based on eavesdropping and cryptoanalisys, isn't successful for the attacker. In addition, we show that many active attacks are unsuccessful too.