actually, i think the above is incorrect in detail, at least for some key distribution algorithms, but it gives the correct idea.