This has the nice property that it's possible to write either a new binding, or a new cipher without the other side necessarily needing to know about the other.