#5 use exchanged messages to calculate serverSignature