1.2.3. Hagar's TA protocol