Mutating State value on every reply

[Phil Mayers]

Why does the code do this i.e. xor-ing the eap ID etc. with bytes 3,4,5 
of "State"? I'm sure there's a good reason, but I can't figure out what 
it is.