Yeah, long RSA key for authentication, a good symmetric cipher, encrypt-then-MAC hash. The article Linux-SWAT linked to above has recommendations for good fallback defaults even when Elliptic Curves are not used.
The sad thing is that ed25519 / chacha20-poly1305 would be more efficient than RSA...