fixed serious security flaw (same key must never be used twice)

outgoing/incoming channel will use different keys for
encryption/decryption