Strategy

• MR will pose to S* a question Q about M .

• The question Q is sent to S* encrypted by EMS(?) .

• By correctly responding S* proves S*=MS , and authenticates M .