1. A method operational on a first device for securely establishing an association with a second device over a wireless communication link, comprising: performing a cryptographic key exchange with a second device, wherein cryptographic information for the first and second device is obtained; obtaining a confirmation value for the first device based on the cryptographic information; obtaining a confirmation image based on the confirmation value; and providing the confirmation image to an operator for authentication against a corresponding confirmation image for the second device.