Be sure to pick a fast enough hash function to keep up with a DoS attack when I flood you with connections attempts. The weak hash function may not be signific

Be sure to pick a fast enough hash function to keep up with a DoS attack when I flood you with connections attempts. The weak hash function may not be significant. If I snoop a connection I get all the information to reconstruct the IV and I get the XOR crush of the MD5 result. If I try to brute force this I can find a shared secret that will make a collision on the 32 bit number in about 2^32 trials, but that won't help me when I try to make my own connection with a different IV. There are probably something like 2^96 secrets that will make the collision so the odds me me guessing the right one are hopeless. If there is an analytic reversal of the hash function that yields some constraints on the secret, and I collect enough SYN packets to eliminate all but one secret, then I can connect to your port.