partially implemented LTSS/session key

not yet tested, KDF choice TODO