A regular Diffie-Hellman key exchange is not authenticated, meaning that you don't know who you establish a key with. To authenticate this key exchange, you wou

A regular Diffie-Hellman key exchange is not authenticated, meaning that you don't know who you establish a key with. To authenticate this key exchange, you would need some prior security context (e.g., some shared secret or TLS certificates). In pairing scenarios, you often do not have a prior security context, since the goal is to establish one in the first place. Our approach works without a prior security context by using the physical signal propagation properties of the acoustic signals.