use 256 bit keys where possible, and ECDHA