Hello,
I am currently solving this problem and wondered if when asked to modify the protocol, we could argue that if Bob sent [ Hello, KA+{nonce}], then Manuel could not decrypt the nonce and reorder as only Alice knows KA-.
Is this a correct answer?
Thank you in advance for your time
Kind regards
Luna