add session
send random iv along with the session message
tweak code, add a test on input length, and sha-256 should be enough than sha-512