Needham-Schroeder
Protocol where A is the initiator and B is the responder:
A->B: {N
A
, A}
pub(B)
B->A: {N
A
, N
B
}
pub(A)
A->B: {N
B
}
pub(B)
Point of view: responder with N
B
uniquely originating, and privk(A) non-originating