There are multiple crypto lines. Asterisk would respond with the one that was accepted and use that for the encryption.