Three Way Authentication

• Final message from A to B is included, with a signed copy of the nonce rB

• No need for timestamps; each sides echoes back a nonce to prevent replay

• Used when no synchronized clocks available