Station-to-Station protocol

Station-to-Station (STS) protocol is a cryptographic key agreement scheme. The protocol is based on classic Diffie–Hellman, and provides mutual key and entity authentication. Unlike the classic Diffie–Hellman, which is vulnerable to man-in-the-middle attacks, this protocol assumes that both parties have signature keys which are used to sign messages, thereby providing security against man-in-the-middle attacks.

In addition to protecting the established key from an attacker, the STS protocol uses no timestamps and provides perfect forward secrecy. It also entails two-way explicit key confirmation, making it an authenticated key agreement with key confirmation (AKC) protocol.

STS was originally presented in 1987 in the context of ISDN security, driven in part by a need to eliminate the potential for spies to sell used keys to adversaries. It was finalized in 1989 and generally presented by Whitfield Diffie, Paul C. van Oorschot and Michael J. Wiener in 1992.