This protocol assumes there's already a shared secret. So you need another one for the key exchange. Which can provide forward security. Or not.