rekeying is now blocking
select a supported protocol version and ciphersuite by random