The server generates a random challenge, which it sends to the client. Both systems encrypt the challenge using the secret encryption key. The client sends its result (rc) to the server. If the client's result matches the server's result (rs), then the two nodes have matching keys.