advanced syncookie implementation


24 remaining bits: MAC

hash src/dst addrs/ports, peer's ISN, 16 byte secret

2 secrets, odd and even
active one flipped every 15 seconds
the one becoming active replaced by a new one
the secret's lifetime is 30 seconds