/prog/rider can't SSL.

Wave googbye privacy.

>>9

but authenticated communication is also a cryptographic problem

And? Authentication is still a different problem which solves totally different things.

TLS creates keys with DH

You can use static RSA/DSA keys
Or use ECDH(E) instead and thus generate some form of ECC keys.

and then uses them for HMAC

HMAC is entirely optional. You do not need it if you use GCM or something like Chacha20 + Poly.