V1

Milestones 1–25: the associated data is only both identity keys; the ephemeral key's signing half and the prekey IDs are not authenticated and the sender address is not bound. Accepted only to continue an existing session.