Assume Alice and Bob decide to use following “three-pass protocol” to estabilish shared secret session key K. First, Alice selects random K. Alice also creates random secret one-time pad key KA and XORs it with K. She sends M1 = KA K to Bob. Bob creates random secret one-time pad key KB, XORs what he gets with it to compute M2 = M1 KB.
