works well in clientHello/serverHello