Function new_transaction_id 

pub fn new_transaction_id() -> [u8; 12]

A fresh transaction ID.

§6 requires it to be “uniformly and randomly chosen … cryptographically random”: it is the only thing preventing an off-path attacker from forging a response, and a forged response with a different mapped address would make a UA declare a working flow dead (§4.4.2).