RE: Diffie-Hellman Choices

E-S key-establishment would allow anonymous messages to be sent, which might
be a requirement for certain uses. There also would not be a "shared secret"
that is vulnerable to being discovered. I think it is a good thing to keep
the encryption and signing operations separate, exactly as is the case for
RSA.

Greg Boverman