pk(R), sk(I) I pk(I), sk(R) R nonce ni 1 {I, ni}_{pk(R)} nonce nr {R, ni, nr}_{pk(I)} 2 3 {nr}_{pk(R)} i1 secret(ni) r1 secret(ni) msc Needham-Schroeder Public Key

1