Compute M2 for server authenticity check