TGT (Ticket-granting ticket) represents a copy of the session key, that is ciphered with a key that is only known by KDC (Key Distribution Center), meaning, can only be deciphered by it.