|
The FreeBSD syncookie implementation protects the generated ISN usinga MAC that is keyed on one of several internal secret keys which arerotated periodically. However, the keys are only 32 bits in length,allowing brute force attacks on the secrets to be feasible. |