[sldev] Cryptographic signing of UDP packets

[Thomas Shikami]

Meadhbh Hamrick (Infinity) wrote:
> part of the problem with selecting a sequence number and seeding a 
> PRNG with it is that it is relatively easy to guess the sequence 
> number. there have in fact been a series of attacks based on this, 
> including the recent DNS problems. and even if we could, there would 
> still be the problem that applying a key stream to a packet. PRNGs are 
> generally not intended to be used this way and are not designed to 
> resist attacks based on key-stream recovery.

There is a PRNG in use that was designed for cryptography. It's 
implemented in the algorithm RC4