Making Contributory Key Agreement Robust

Multi-step protocols have an inherent

problem since they are not atomic.

Additional group changes can occur

before the key agreement terminates.

New group controller

Old group controller