Methods for providing security over untrusted networks

A method of establishing security within an untrusted network, comprising:

• providing a digital certificate associated with a first security apparatus associated with a first computerized host device;
• sending said digital certificate via a message to a second security apparatus associated with a second computerized host device;
• receiving at said first security apparatus and from said second security apparatus an initialization vector and a cryptographic element which is encrypted, said cryptographic element having been generated by said second apparatus after receiving said digital certificate;
• decrypting said encrypted cryptographic element to obtain access to said encrypted cryptographic element;
• verifying an integrity of a second message used to transmit said cryptographic element using a digital signature, at least a portion of said second message wrapped along with said digital signature;
• initializing an encryption algorithm using the initialization vector;
• and
• encrypting one or more datagrams exchanged between the computerized host devices using the decrypted cryptographic element.