Thinking about this some more; I think I can articulate my concern a bit more distinctly: Given that I have two systems, on a network in which I know an advers

Thinking about this some more; I think I can articulate my concern a bit more distinctly: Given that I have two systems, on a network in which I know an adversary wishes to deduce the ports I am advertising (as illustrated by the paper's concern over a MitM attack), how do I distribute my shared secret in such a way that my adversary does not deduce it, and does not require a secure channel that would invalidate the need for this mechanism in the first place? I'm no cryptography expert, but from the portions I do know, the challenge is in key distribution. I feel like that is completely missing from the paper, and without it, it limits this mechanism's feasibility enormously.