A user connects to a secured online banking web site. Which of the following statements is incorrect?

$*$

The workstation public key is used to encrypt data transmitted to the web server. The web server private key performs the decryption.

The workstation session key is encrypted with the server public key and transmitted to the web server. The web server private key performs the decryption.

The workstation$-$generated session key is used to encrypt data sent to the web server.

The workstation$-$generated session key is used to decrypt data received by the web server.