@@ -2223,6 +2223,53 @@ The following is a list of Secrets Types.
22232223{: # format_zigbee_aps title='ZigBee APS Key Data Format' artwork-align="center"}
22242224
22252225
2226+ {: indent='8'}
2227+ 0x45535053 :
2228+ : ESP Security Association keys.
2229+ This is in CSV format ([RFC 4180]), with each record containing fields that
2230+ describe an ESP security association. Each line has the following columns :
2231+ " Protocol" ,"Src IP","Dest IP","SPI","Encryption","Encryption Key",
2232+ " Authentication" ,"Authentication Key","SN","ESN High Bits".
2233+ All columns must be filled in the order specified here with a value and the header line is ignored if present.
2234+ If a column contains an unknown value, the line should be skipped.
2235+ If the line contains more columns than what is expected by the reader, the extra ones should be ignored.
2236+ If the line contains fewer columns than what is expected by the reader, it should either apply a default
2237+ value (if possible) or the line should be skipped.
2238+
2239+ * Protocol: Protocol used. Can be either "IPv4", "IPv6" or "Any".
2240+
2241+ * Src IP: Source IP address. String containing the address, wildcard (*) character is supported.
2242+
2243+ * Dest IP: Destination IP address. String containing the address, wildcard (*) character is supported.
2244+
2245+ * SPI: Security Parameter Index. String of a 32 bits integer in hexadecimal format (starting with 0x).
2246+
2247+ * Encryption: Encryption algorithm. Can be "NULL", "TripleDES-CBC [RFC2451]", "AES-CBC [RFC3602]",
2248+ " AES-CTR [RFC3686]" , "DES-CBC [RFC2405]", "CAST5-CBC [RFC2144]", "BLOWFISH-CBC [RFC2451]", "TWOFISH-CBC",
2249+ " AES-GCM [RFC4106]" , "AES-GCM with 8 octet ICV [RFC4106]", "AES-GCM with 12 octet ICV [RFC4106]",
2250+ " AES-GCM with 16 octet ICV [RFC4106]" , "AES-GCM with IIV and 16 octet ICV [RFC4106 & RFC8750]",
2251+ " ChaCha20 with Poly1305 [RFC7634]" or "ChaCha20 with Poly1305 and IIV [RFC7634 & RFC8750]".
2252+ New algorithms might be aded in the future.
2253+
2254+ * Encryption Key: Encryption key. String containing the key in heaxadecimal format (starting with 0x).
2255+
2256+ * Authentication: Authentication algorithm. Can be "NULL", "HMAC-SHA-1-96 [RFC2404]",
2257+ " HMAC-SHA-256-96 [draft-ietf-ipsec-ciph-sha-256-00]" , "HMAC-SHA-256-128 [RFC4868]",
2258+ " HMAC-SHA-384-192 [RFC4868]" , "HMAC-SHA-512-256 [RFC4868]", "HMAC-MD5-96 [RFC2403]",
2259+ " MAC-RIPEMD-160-96 [RFC2857]" , "ANY 64 bit authentication [no checking]",
2260+ " ANY 96 bit authentication [no checking]" , "ANY 128 bit authentication [no checking]",
2261+ " ANY 192 bit authentication [no checking]" or "ANY 256 bit authentication [no checking]".
2262+ New algorithms might be aded in the future.
2263+
2264+ * Authentication Key: Authentication key. String containing the key in heaxadecimal format (starting with 0x).
2265+
2266+ * SN: Sequence number length. Can be "32-bit" or "64-bit".
2267+
2268+ * ESN High Bits: Extended Sequence Number upper 32 bits. String of a 32 bits integer in hexadecimal
2269+ format (starting with 0x).
2270+ {: vspace='0'}
2271+
2272+
22262273# # Custom Block {#section_custom_block}
22272274
22282275A Custom Block (CB) is the container for storing custom data that
0 commit comments