[session] Create an interface for managing session keys

[mcy]

Also includes part of an implementation of session estabilishment in the PA-RoT server.

The implementation is incomplete; I need to re-write the SHA-2/HMAC interfaces first.