Nonce generation and packet order / anti-replay checking
Protect against whole-session replay