Show a flawed protocol in which Alice and Bob negotiate what cryptographic algorithms to use, and an active attacker can trick them into using weaker cryptography. Show how to fix the protocol.

What does a non-stateless cookie protect against? What is the advantage of making the cookie stateless?