WIP: Add session hash and remote CCS

PR so this can be reviewed.
s/generates/derives/