RFC 6528: Defending against Sequence Number Attacks
This RFC has been replaced. Do not implement against it for new work — it was formally obsoleted by RFC 9293.
Current document in this lineage: RFC 7805 — Moving Outdated TCP Extensions and TCP-Related Documents to Historic or Informational Status; RFC 9293 — Transmission Control Protocol (TCP)
In plain English — editorial summary, not part of the RFC
This document specifies an algorithm for the generation of TCP Initial Sequence Numbers (ISNs), such that the chances of an off-path attacker guessing the sequence numbers in use by a target connection are reduced. This document revises (and formally obsoletes) RFC 1948, and takes the ISN generation algorithm originally proposed in that document to Standards Track, formally updating RFC 793. [STANDARDS-TRACK]
Document record
- Document ID
- RFC6528
- Published
- February 2012
- Authors
- F. Gont; S. Bellovin
- Status
- PROPOSED STANDARD
- Stream
- IETF
- Area
- wit
- Pages
- 12
- Also known as
- —
Topics
Standards lineage
This document is one revision in a chain of 18 RFCs, each formally replacing the one before it.
- RFC 675 (1974)
- RFC 721 (1976)
- RFC 761 (1980)
- RFC 793 (1981)
- RFC 813 (1982)
- RFC 816 (1982)
- RFC 879 (1983)
- RFC 896 (1984)
- RFC 1078 (1988)
- RFC 1948 (1996)
- RFC 2873 (2000)
- RFC 6013 (2011)
- RFC 6093 (2011)
- RFC 6429 (2011)
- RFC 6528 (2012)
- RFC 6691 (2012)
- RFC 7805 (2016)
- RFC 9293 (2022) ✓
Read the full history of Transmission Control Protocol (TCP) →
Referenced by
One later RFC formally updates or obsoletes part of this document.
Related documents
Ranked automatically by shared keywords, IETF area and stream — not by editorial selection.
- RFC 6633Deprecation of ICMP Source Quench MessagesCurrent
May 2012
- RFC 6525Stream Control Transmission Protocol (SCTP) Stream ReconfigurationCurrent
March 2012
- RFC 6562Guidelines for the Use of Variable Bit Rate Audio with Secure RTPCurrent
March 2012
- RFC 6582The NewReno Modification to TCP's Fast Recovery AlgorithmCurrent
April 2012
- RFC 6458Sockets API Extensions for the Stream Control Transmission Protocol (SCTP)Current
December 2011
- RFC 6429TCP Sender Clarification for Persist ConditionObsoleted
December 2011
- RFC 6641Using DNS SRV to Specify a Global File Namespace with NFS Version 4Current
June 2012
- RFC 6642RTP Control Protocol (RTCP) Extension for a Third-Party Loss ReportCurrent
June 2012
Also filed under
About this page
The document record above — title, authors, date, status, stream, area, relationships, DOI and errata — is imported verbatim from the public RFC Editor index. The “in plain English” section is editorial: written by The metasystema editorial team, not part of the RFC. Where the two differ, the RFC text governs.
Last checked against the RFC Editor index on . RFCs are never revised after publication; changes are issued as new documents.
Data sources · Editorial policy · Report a correction · What is an RFC?