C2C seems not to have a session counter

[abattistello-secpat]

Up to tag v1.2.0, the example code provided for the chip 2 chip security, does not mention a session counter, or alternatively some random nonce used to differentiate one session from another. It thus seems possible to replay previous messages exchanged during a legitimate session, to reissue the same commands.

[RobMeades]

Thanks for the interest but the chip to chip security feature was removed back in commit 2639236, mid 2023.

[RobMeades]

I will close this: please feel free to re-open if there is more to discuss.