http://tttyx2vwp7ihml3vkhywwcizv6nbwrikpgeciy3qrow7l7muak2pnhad.onion/Publications.html
We eliminate the use of RSA
encryption and decryption from circuit setup, and we reduce the
number of DH exponentiations vs. the current Tor circuit setup
protocol while maintaining immediate forward secrecy. We also
describe savings that can be obtained by precomputing during idle
cycles values that can be determined before the protocol starts.