getting session done, next step: session decryption