network formation circuitry configured to establish a wireless network between a primary node and a first secondary node;

data exchange circuitry configured to perform data exchanges between the primary node and the first secondary node using secure sessions; and

key refreshment circuitry configured to derive a new network key for the wireless network based on a pre-shared key, further based on a header, and further based on a current network key concatenated with a session count,

wherein the header includes a frame counter value, a key refreshment counter value, and a key change bit, and

wherein the key refreshment circuitry is configured to derive the new network key during at least one secure session of the secure sessions.