Computer Security:

What are Session Keys?

Examine the establishment of session keys such that the session key is uncomputable, and unspoofable.

You may wish to study systems that rely on:

A shared secret

Authenticated public keys (including Diffie-Hellman)

A single public key

One-time passwords

To better understand how these methods are used, study their implementation in various protocols/products, such as:

Secure Socket Layer

Show attacks and defenses to these session key establishment protocols at all levels, including one or both of the communicating machines being compromised.