During the TLS encryption setup phase, ICE clients use asymmetric encryption to establish a secure connection between a client application and a Rallypoint. The specific algorithm used is determined by a cipher agreed upon by both the Rallypoint and the client, based on the X.509 certificates they exchange during the handshake process.