Protocol: switch to a-posteriori key exchange (simpler)