Session IDs: Cont'd

• Devices that use pseudorandom session ID start without unique session ID

  • Temporary session ID
  • Flag bits
  • Not Replay Resistant

• Some devices may be stuck with only this "temporary session ID"

• Some devices may keep fixed ID because they never lose context.

Previous slide

Next slide

Back to first slide

View graphic version