Group Domain of Interpretation (GDOI) Payloads

SA KEK Payload Values - POP Algorithm

Registration Procedure(s)

Standards Action

Reference

[RFC3547][RFC6407]

Note

The POP algorithm is a 16-bit value that is used to describe the
encryption algorithm of the POP payload.

Available Formats

CSV

Value	Algorithm Type	Reference
0	Reserved	[RFC3547]
1	POP_ALG_RSA	[RFC3547]
2	POP_ALG_DSS	[RFC3547]
3	POP_ALG_ECDSS	[RFC3547]
4-127	Unassigned
128-255	Private Use	[RFC3547]
256-32767	Unassigned

SA KEK Payload Values - KEK Attributes

Registration Procedure(s)

Standards Action

Reference

[RFC3547][RFC6407]

Note

The KEK Attribute consists of a 16-bit type and its associated value.
 KEK attributes are used to pass policy from a GCKS to a group member.

Available Formats

CSV

Value	ID Class	Type	Reference
0	Reserved
1	KEK_MANAGEMENT_ALGORITHM	B	[RFC3547]
2	KEK_ALGORITHM	B	[RFC3547]
3	KEK_KEY_LENGTH	B	[RFC3547]
4	KEK_KEY_LIFETIME	V	[RFC3547]
5	SIG_HASH_ALGORITHM	B	[RFC3547]
6	SIG_ALGORITHM	B	[RFC3547]
7	SIG_KEY_LENGTH	B	[RFC3547]
8	KE_OAKLEY_GROUP	B	[RFC3547]
9	KEK_ACK_REQUESTED	B	[RFC8263]
10-127	Unassigned
128-255	Private Use		[RFC6407]
256-32767	Unassigned

SA KEK Payload Values - KEK_MANAGEMENT_ALGORITHM

Registration Procedure(s)

Standards Action

Reference

[RFC3547][RFC6407]

Available Formats

CSV

Value	KEK Management Type	Reference
0	Reserved	[RFC3547]
1	LKH	[RFC3547]
2-127	Unassigned
128-255	Private Use	[RFC3547]
256-65535	Unassigned

SA KEK Payload Values - KEK_ALGORITHM

Registration Procedure(s)

Standards Action

Reference

[RFC3547][RFC6407]

Available Formats

CSV

Value	Algorithm Type	Reference
0	RESERVED	[RFC3547]
1	KEK_ALG_DES	[RFC3547]
2	KEK_ALG_3DES	[RFC3547]
3	KEK_ALG_AES	[RFC3547]
4-127	Unassigned
128-255	Private Use	[RFC3547]
256-65535	Unassigned

SA KEK Payload Values - KEK_KEY_LENGTH

Registration Procedure(s)

Standards Action

Reference

[RFC3547]

Note

The KEK_KEY_LENGTH class specifies the KEK Algorithm key
length (in bits).

Value	Type	Reference
No registrations at this time.

SA KEK Payload Values - KEK_KEY_LIFETIME

Registration Procedure(s)

Standards Action

Reference

[RFC3547]

Value	Type	Reference
No registrations at this time.

SA KEK Payload Values - SIG_HASH_ALGORITHM

Registration Procedure(s)

Standards Action

Reference

[RFC3547][RFC6407]

Available Formats

CSV

Value	Algorithm Type	Reference
0	Reserved	[RFC3547]
1	SIG_HASH_MD5	[RFC3547]
2	SIG_HASH_SHA1	[RFC3547]
3	SIG_HASH_SHA256	[RFC6407]
4	SIG_HASH_SHA384	[RFC6407]
5	SIG_HASH_SHA512	[RFC6407]
6-127	Unassigned
128-255	Private Use	[RFC3547]
256-65535	Unassigned

SA KEK Payload Values - SIG_ALGORITHM

Registration Procedure(s)

Standards Action

Reference

[RFC3547][RFC6407]

Available Formats

CSV

Value	Algorithm Type	Reference
0	Reserved	[RFC3547]
1	SIG_ALG_RSA	[RFC3547]
2	SIG_ALG_DSS	[RFC3547]
3	SIG_ALG_ECDSS	[RFC3547]
4	SIG_ALG_ECDSA-256	[RFC6407]
5	SIG_ALG_ECDSA-384	[RFC6407]
6	SIG_ALG_ECDSA-521	[RFC6407]
7-127	Unassigned
128-255	Private Use	[RFC3547]
256-65535	Unassigned

SA KEK Payload Values - SIG_KEY_LENGTH

Registration Procedure(s)

Standards Action

Reference

[RFC3547]

Note

The SIG_KEY_LENGTH class specifies the length of the SIG payload key.

Value	Type	Reference
No registrations at this time.

SA KEK Payload Values - KE_OAKLEY_GROUP

Registration Procedure(s)

Standards Action

Reference

[RFC3547]

Value	Type	Reference
No registrations at this time.

SA KEK Payload Values - KEK_ACK_REQUESTED

Registration Procedure(s)

Specification Required

Expert(s)

Brian Weis

Reference

[RFC8263]

Available Formats

CSV

Value	Type	Reference
0	Reserved	[RFC8263]
1	REKEY_ACK_KEK_SHA256	[RFC8263]
2	REKEY_ACK_LKH_SHA256	[RFC8263]
3	REKEY_ACK_KEK_SHA512	[RFC8263]
4	REKEY_ACK_LKH_SHA512	[RFC8263]
5-128	Unassigned
129-255	Private Use

SA TEK Payload Values - Protocol-ID

Registration Procedure(s)

Standards Action

Reference

[RFC3547]

Note

The SA_TEK protocol-ID is an 8-bit value that is used to describe the
type of TEK is included in the SA_TEK payload. The following table
defines values for the Security Protocol

Available Formats

CSV

Value	Protocol ID	Reference
0	RESERVED	[RFC3547]
1	GDOI_PROTO_IPSEC_ESP	[RFC3547]
2	GDOI_PROTO_IPSEC_AH	[RFC6407]
3	GDOI_PROTO_IEC_61850	[RFC8052]
4-127	Unassigned	[RFC3547]
128-255	Private Use	[RFC3547]

TEK Download Type

Registration Procedure(s)

Standards Action

Reference

[RFC3547][RFC6407]

Available Formats

CSV

Value	TEK Class	Type	Reference
0	RESERVED		[RFC3547]
1	TEK_ALGORITHM_KEY	V	[RFC3547]
2	TEK_INTEGRITY_KEY	V	[RFC3547]
3	TEK_SOURCE_AUTH_KEY	V	[RFC3547]
4-127	Unassigned
128-255	Private Use		[RFC6407]
256-32767	Unassigned

KEK Download Type

Registration Procedure(s)

Standards Action

Reference

[RFC3547][RFC6407]

Note

The following attributes may be present in a KEK download Type. In the
table, attributes that are defined as TV are marked as Basic (B);
attributes which are defined as TLV are marked as Variable (V).

Available Formats

CSV

Value	KEK Class	Type	Reference
0	RESERVED		[RFC3547]
1	KEK_ALGORITHM_KEY	V	[RFC3547]
2	SIG_ALGORITHM_KEY	V	[RFC3547]
3-127	Unassigned
128-255	Private Use		[RFC6407]
256-32767	Unassigned

LKH Download Type

Registration Procedure(s)

Standards Action

Reference

[RFC3547]

Available Formats

CSV

Value	KEK Class	Type	Reference
0	Reserved		[RFC3547]
1	LKH_DOWNLOAD_ARRAY	V	[RFC3547]
2	LKH_UPDATE_ARRAY	V	[RFC3547]
3	SIG_ALGORITHM_KEY	V	[RFC3547]
4-127	Unassigned
128-255	Private Use		[RFC3547]
256-32767	Unassigned

SID Download Type

Registration Procedure(s)

Standards Action

Reference

[RFC6407]

Available Formats

CSV

Value	SID Class	Type	Reference
0	RESERVED		[RFC6407]
1	NUMBER_OF_SID_BITS	B	[RFC6407]
2	SID_VALUE	V	[RFC6407]
3-128	Unassigned
129-255	Private Use		[RFC6407]
256-32767	Unassigned