Suppose we are using a three-message mutual authentication protocol, and Alice initiates contact with bob. Suppose we wish bob to be a stateless server, and therefore it is inconvenient to require him to remember the challenge he sent to Alice. Lets modify the exchange so that Alice sendsthe challenge back to Bob, along with the encrypted challeng.

So the protocol is:

Is this protocol secure?