Encrypt candidate_list with session_key