[asterisk-dev] A question about the nonce generation and checking

Isaac Lee cwl20 at student.canterbury.ac.nz
Wed Jan 23 04:07:46 CST 2008


I would like to find out more information on how the Asterisk generates 
its nonce and whether it checks the validity of the nonce. Whereabouts 
in the code I can find those information? And is the nonce just a random 
string or it is computed based on some caller related information to 
prevent replay attacks? Thank you


More information about the asterisk-dev mailing list