CryptSig now has verify only mode that takes public keys. KeyExchange can now process JFK message2.