Dear All, I use the Fips bttery of tests (which you can find in the very nice cryptool) to test the radomness of _Session cookies_, and that's basically all it's good for. -- http://secdev.zoller.lu Thierry Zoller Fingerprint : 5D84 BFDC CD36 A951 2C45 2E57 28B3 75DD 0AC6 F1C7