6 Client -> Server : R, enc(H(DSAPub), R, El(CDHPub))
12 Server -> Client : enc(H(DSAPub), R+1, El(SDHPub))\nenc(K, R, RS+SS)
15 K=H(DH(SDHPriv, CDHPub))
20 Client -> Server : enc(K, R+1, RS+RC+SC+Sign(DSAPriv, K))
22 K=H(DH(CDHPriv, SDHPub))
27 Server -> Client : enc(K, R+2, RC)
31 Verify(DSAPub, Sign(DSAPriv, K), K)