Protocol for Sending a Signed, Encrypted Message M

• Bob computes digital signature $\sigma$ = S_B(M), and creates new message .
• Bob computes C = P_A(M') and sends C to Alice.
• Alice computes = S_A(C) and then verifies signature using M = .