rekey: backtracking resistance