[asterisk-dev] A question about the nonce generation and checking

[Isaac Lee]

Hi,

I would like to find out more information on how the Asterisk generates 
its nonce and whether it checks the validity of the nonce. Whereabouts 
in the code I can find those information? And is the nonce just a random 
string or it is computed based on some caller related information to 
prevent replay attacks? Thank you

Lex