We conclude by showing that the Scuttlebutt handshake can achieve its security guarantees in half the amount of message round-trips.

Where do they show this? What would such a handshake look like?

@cel

I'm also confused by this. The paper mentions that the authenticated key exchanges requires a "2-RTT synchronous protocol" but I'm unclear where they concluded that we only need 1 round trip.

@Christian Bundy @cel, I think it works this way: