# In HMQV, can one use multiple identities with one public key?

The HMQV protocol has 2 "identity" fields $\hat{A}, \hat{B}$ that are used in the dual signature - and it tries to guarantee that any properly-generated session key is only shared by a single $(A, B, \hat{A}, \hat{B})$ 4-tuple.

However, the paper isn't particularly clear whether a party can use multiple, potentially attacker-controlled, identities.

-
It would be beneficial, if you provided a reference, to what scheme you're referring to. Google scholar told me, but it also gave a hit for Another Look at HMQV from A. Menezes. Maybe have a look at it, because that paper claims, HMQV is insecure. I didn't get further than the abstract in both papers, tho. – tylo Sep 29 '14 at 14:20