A method of establishing a multiplicity of shared secrets at two mutually authenticated end points in a network. The method includes authenticating a first end point in the network based on an asymmetric key pair and authenticating a second end point based on an asymmetric key pair. Upon successful authentication of the first and second end points, the end points negotiate a shared secret. Multiple shared secret keys are generated from the negotiated shared secret and session keys are computed from the multiple shared secret keys.