I am not sure if the nonce in Phase One is the same as the one in Phase two. And I still can not see why there is need using nonce to prevent from replay attacking in Phase One. I think the Kes of DH exch can do this. Dong Xiaohu