ERAT can now be initally created (not recreated yet). ERATType now stores much more info. MasterSecret now uses KeyGenUtils for kdf