> Yes, that's right. Do you think it should contain the nonces? I don't think it's necessary in this case. I'd prefer that it be the same computation as a regular notify/delete hash (i.e. prf(SKEYID_a, M-ID | Notify)). Derrell