use 3 keys and use RSA encryption for SSL channel. Verifiy peer SSL certificate after connection is up with a signature from the server.