Your proposal is malleable, so in particular, confidentiality does not hold against a chosen-W' attack. <br> Also, the fact that your proposal concatenates s with p <br> suggests that H [can probably be evaluated too quickly](http://crypto.stackexchange.com/q/3196/991).