2019-4-21 · RFC 1948 Sequence Number Attacks May 1996 It is vital that F not be computable from the outside, or an attacker could still guess at sequence numbers from the initial sequence number used for some other connection. We therefore suggest that F be a cryptographic hash function of the connection-id and some secret data. MD5 [] is a good choice, since the code is widely available.