Server → Client Clause Samples

Server → Client. RB||H(KB, RA) After receiving RA ⊕ pw, the server recovers RA by computing (RA ⊕ pw) ⊕ pw. Then the server chooses a random number b ∈ [1,q − 1], computes RB = gb mod p and KB = Rb = gab mod p, and then sends RB||H(KB, RA) to the client. Step 3. Client → Server: H(KA, RB) After receiving RB||H(KB, RA), the client computes KA = Ra = gab modp and verifies whether the received H(KB, RA) is equal to H(KA, RA). If it holds, the client computes H(KA, RB) and sends it to the server.