Implementation

Address Generation
ScanSSH generates chunks of 64,000 addresses.
Unique randomness created by encrypting a counter.
Modified Tiny Encryption Algorithm (TEA).
Variable block size cipher.

Producing Addresses
Send TCP SYN packets to host specified by generated address.
ScanSSH supports 4,096 outstanding TCP SYN packets.
On receiving TCP RST, report connection refused.
On receiving TCP SYN/ACK, give address to consumers.