& $r \getsr \Nupto{q}$; \\
& $R \gets r P$; \\
& $Y \gets r A$; \\
- & $h \gets H(\cookie{check}, R, Y)$; \\
+ & $h \gets H(\cookie{check}, Y)$; \\
& \\
\send{<-}{(R, h)}
$Y \gets a R$; \\
\\
\diff \textbf{Check} $q R = 0$; \\
- \textbf{Check} $h = H(\cookie{check}, R, Y)$ \\
+ \textbf{Check} $h = H(\cookie{check}, Y)$ \\
\send{->}{Y}
& \textbf{Check} $Y$
\end{protocol}