The protocol opens with A communicating in clear to AS his own claimed identity and the identity of the desired correspondent, B, together with A's nonce identifier for this transaction, I_(A1). ("Nonce" means "used only once.")