I know that it isn't just one module. What is the handshake achieving exactly? Because it's not additional security from an attacker trying to replace the keyless entry module with a hacked one, and if it is doing that then this is a terrible security design and the actual solution is not to get to keep using this 'security' threat model.