. . . "sends it a pair (N, E_k(N)), where N is a nonce and k is the secret shared" .