implemented LTSS/session key, still not tested