> brute force search for one quite practical -- especially since it only > need be done once. actually, it needs to be done once per session key (i.e., when you change the session key, you need to re-issue a LEAF) -derek