The simple scheme where decryptionKey3 = (decryptionKey1, decryptionKey2), and where decryption using such a combined key is simply defined as decrypting the message with each of the component keys in turn, satisfies all your requirements except the last one.