The flags are formed by the following data: 1 reserved bit, which is set to zero; — 1 bit flag for the associated data, which is zero; — 3 bits to represent (t-2)/2, which is 101 (t =12); — 3 bits to represent which is 001 (q = 2). q-1, — The counter = 0, 1, ..., r, is formed with 1-octet flags; 13-octet nonce and 2-octet integer The Ctr(i), i N; i. format of is illustrated in Figure 40 Ctr(i) (13 octets) (2 octets) Flags (1 octet) i Nonce Figure 40 The flags for is 00000001. Ctr(i) The encapsulation of an MIS PDU consists of the following steps: a) Fetch Transaction ID and FN from the MIS header. b) Increment a positive number of to update the SN. SN c) Construct the nonce, as described in 9.3.3.2. N, d) Input and to AES-CCM generation-encryption process as specified in SP 800-38C. The and N P B0 all the counter numbers are formed as described in Figure 39 and Figure 40, respectively. e) Obtain the output, C, of AES-CCM. 9.3.3.3.2 Decapsulation For a given SA, the prerequisites for AES-CCM decapsulation includes an encryption key MIEK, AES block cipher encryption block, the parameters and t, n, q. The decapsulation of a protected MIS PDU consists of the following steps. a) Fetch Transaction ID and FN from the MIS header. b) Fetch from the security TLV. SN c) Construct the nonce, as described in 9.3.3.2. N, d) Input and to AES-CCM decryption-verification process as specified in SP 800-38C. The and N C B0 all the counter numbers are formed as described in 9.3.3.3.1. e) Obtain the output, or P, “INVALID”. 9.3.3.4 Format of security TLV
The flags are formed by the following data: — 1 reserved bit, which is set to zero; — 1 bit flag for the associated data, which is zero; — 3 bits to represent (t-2)/2, which is 101 (t =12); — 3 bits to represent q-1, which is 001 (q = 2). The counter Ctr(i), i = 0, 1, ..., r, is formed with 1-octet flags; 13-octet nonce N; and 2-octet integer i. The format of Ctr(i) is illustrated in Figure 40 Flags (1 octet) Nonce (13 octets) i (2 octets) Figure 40 The flags for Ctr(i) is 00000001. The encapsulation of an MIS PDU consists of the following steps: a) Fetch Transaction ID and FN from the MIS header. b) Increment a positive number of SN to update the SN. c) Construct the nonce, N, as described in 9.3.3.2. d) Input N and P to AES-CCM generation-encryption process as specified in SP 800-38C. The B0 and all the counter numbers are formed as described in Figure 39 and Figure 40, respectively. e) Obtain the output, C, of AES-CCM. 9.3.3.3.2 Decapsulation For a given SA, the prerequisites for AES-CCM decapsulation includes an encryption key MIEK, AES block cipher encryption block, the parameters t, n, and q. The decapsulation of a protected MIS PDU consists of the following steps. a) Fetch Transaction ID and FN from the MIS header. b) Fetch SN from the security TLV. c) Construct the nonce, N, as described in 9.3.3.2. d) Input N and C to AES-CCM decryption-verification process as specified in SP 800-38C. The B0 and all the counter numbers are formed as described in 9.3.3.3.1. e) Obtain the output, P, or “INVALID”. 9.3.3.4 Format of security TLV
21-14-0067-01-REVP-802-21-2008-text-to-be-included.docx