Hi so lets assume that client-side has a key that is not transfered via the same channel as the encrypt