Is it a good idea to use different (unrelated!) seeded PRNG's for the challenge data (which can be seen by sniffing) and the masterkey (which should never leave out of client's memory? read you later - Holger Reif http://remus.prakinf.tu-ilmenau.de/Reif/