Solutions to all three questions of the examination dated 15 June 2015. The cover permits candidates to answer two questions.[ref]
The authentication claims in Question 2 require particular care: the printed third message permits substitution of Bob's key ticket after his cryptographic nonce becomes public. The solutions distinguish the intended freshness argument from the Dolev-Yao model attack that defeats Bob's authentication. This is a property of the printed protocol, rather than a missing part of the source.