Or maybe the only deferral that is useful, at least for this security property, is just that the initiator only sends e initially, followed by the responder sending e, ee. That is the only sequence that gives the no information on replay property I think. That gives a reasonable set of defered patterns. Justin