ML7065-033 User’s Manual
Chapter 7 Commands
44
•
Receive Frame Processing
When secured MAC frames are received, MAC will execute security processing (combination) to the receive
frames. In order to combine the received frames, MAC will search for ACLExtendedAddress, or
ACLShortAddress and ACLPANId, that would match with the source addresses from the ACL entry. If the
retrieval is successful, MAC will use the security suite and the security material from ACLEntryDescriptor,
combine the received frames, and then transmit them to the HOST.
If retrieval from the ACL is unsuccessful, the following will occur:
When macDefaultSecurity (PIB-ID: 0x72) is set to TRUE and when the source address is a 64-bit address,
then a security suite indicated by macDefaultSecuritySuite (PIB-ID: 0x75) and a security material indicated by
macDefaultSecurityMaterial (PIB-ID: 0x74) will be used to combine the received frames. If the source
address is a 16-bit address, then the received data will be notified to the HOST without combining them.
When macDefaultSecurity (PIB-ID: 0x72) is set to FALSE, then the received data will be notified to the
HOST without combining them.
7.5.2 Security Suite
Each security suite is specified by a one-byte identifier as shown in Table 7.5.2.
The identifier “0x00
”
indicates that security mode is not used.
Table 7.5.2 Security Suite
Idenrifer SecuritySuite
Access
Control
Data
encryption
Frame
integrity
Sequential
fleshness
0x00 None
— — — —
0x01 AES-CTR
{
{
z
0x02 AES-CCM-128
{
{
{
z
0x03 AES-CCM-64
{
{
{
z
0x04 AES-CCM-32
{
{
{
z
0x05 CBC-MAC-128
{
—
{
—
0x06 CBC-MAC-64
{
—
{
—
0x07 CBC-MAC-32
{
—
{
—
Notes:
{
: Supports
z
: Supports only secure communications between the devices included in the ACL entry.
AES:
Advanced encryption standard
ACL:
Access control list
CTR: Counter
mode
CBC-MAC: Cipher block chaining message authentication code
CCM:
CTR + CBC-MAC