D.3.3 Header layout for NetworkMessages with integrity (signing)

UADP messages may be signed to ensure integrity. In this case a security header and a signature have to be added to the message.

This header layout is basically the same as the header layout defined in D.3.2 but with additional security level ‘Signing but no encryption’. The NetworkMessage header layout with signing is shown in Figure D.3

Figure D.3 – UADP NetworkMessage header layout with integrity (signing)

Table D.6 shows the configuration for the NetworkMessage header with signing. The table contains only the added or modified rows from Table D.5.

Table D.6 – UADP NetworkMessage header layout with integrity (signing)
Name Type Restrictions
ExtendedFlags1ByteBit 4: SecurityHeader enabled = 1
SecurityHeader

SecurityFlags

Byte

Bit 0: NetworkMessage Signed enabled = 1

Bit 1: NetworkMessage Encryption enabled = 0

Bit 2: SecurityFooter enabled = 0

Bit 3: Force key reset enabled = 0

Bit range 4-7: Reserved

SecurityTokenId

IntegerIdThe ID of the security token that identifies the security key in a SecurityGroup.

NonceLength

ByteThe length of the Nonce used to initialize the encryption algorithm.

MessageNonce

Byte[NonceLength]A number used exactly once for a given security key.