> He [Ed: Eve] then sends his half to Alice signed and establishes a connection. Now Alice is communicating with Eve and Eve is decrypting the message and sending to Bob. Eve can only sign with her own private key. So your attack only works if Alice accepts the signature from Eve. That means that: 1. Eve's public verification key needs to be trusted and 2. that Alice doesn't check that that public key belongs to the intended party, i.e. Bob. So no, this is not the same as raw Diffie-Hellman - unless the necessary verification steps are missing, of course.