Group Domain of Interpretation (GDOI) Payloads

Created
2003-03-28
Last Updated
2026-07-06
Note
In all cases, new assigned numbers and values must be added due to a
Standards Action as defined in [RFC 2434].
Available Formats

XML
HTML
TXT

Registries Included Below

GDOI ID Payload Type Values

Registration Procedure(s)
Standards Action
Reference
[RFC 3547]
Note
When an ISAKMP identification payload is used with GDOI, the assigned
values for the Identification Type field are interpreted according to
this registry.

The GDOI ID Payload Type is an 8-bit value that is used as a
discriminator for interpretation of the variable-length Identification
Payload.  The following table describes ID Payload Types.
Available Formats

CSV
Value ID Type Reference
0-10 Reserved [RFC 3547]
11 ID_KEY_ID [RFC 3547]
12 Reserved [RFC 3547]
13-127 Unassigned
128-255 Private Use [RFC 3547]

SA KEK Payload Values

SA KEK Payload Values - POP Algorithm

Registration Procedure(s)
Standards Action
Reference
[RFC 3547][RFC 6407]
Note
The POP algorithm is a 16-bit value that is used to describe the
encryption algorithm of the POP payload.
Available Formats

CSV
Value Algorithm Type Reference
0 Reserved [RFC 3547]
1 POP_ALG_RSA [RFC 3547]
2 POP_ALG_DSS [RFC 3547]
3 POP_ALG_ECDSS [RFC 3547]
4-127 Unassigned
128-255 Private Use [RFC 3547]
256-32767 Unassigned

SA KEK Payload Values - KEK Attributes

Registration Procedure(s)
Standards Action
Reference
[RFC 3547][RFC 6407]
Note
The KEK Attribute consists of a 16-bit type and its associated value.
 KEK attributes are used to pass policy from a GCKS to a group member.
Available Formats

CSV
Value ID Class Type Reference
0 Reserved
1 KEK_MANAGEMENT_ALGORITHM B [RFC 3547]
2 KEK_ALGORITHM B [RFC 3547]
3 KEK_KEY_LENGTH B [RFC 3547]
4 KEK_KEY_LIFETIME V [RFC 3547]
5 SIG_HASH_ALGORITHM B [RFC 3547]
6 SIG_ALGORITHM B [RFC 3547]
7 SIG_KEY_LENGTH B [RFC 3547]
8 KE_OAKLEY_GROUP B [RFC 3547]
9 KEK_ACK_REQUESTED B [RFC 8263]
10-127 Unassigned
128-255 Private Use [RFC 6407]
256-32767 Unassigned

SA KEK Payload Values - KEK_MANAGEMENT_ALGORITHM

Registration Procedure(s)
Standards Action
Reference
[RFC 3547][RFC 6407]
Available Formats

CSV
Value KEK Management Type Reference
0 Reserved [RFC 3547]
1 LKH [RFC 3547]
2-127 Unassigned
128-255 Private Use [RFC 3547]
256-65535 Unassigned

SA KEK Payload Values - KEK_ALGORITHM

Registration Procedure(s)
Standards Action
Reference
[RFC 3547][RFC 6407]
Available Formats

CSV
Value Algorithm Type Reference
0 RESERVED [RFC 3547]
1 KEK_ALG_DES [RFC 3547]
2 KEK_ALG_3DES [RFC 3547]
3 KEK_ALG_AES [RFC 3547]
4-127 Unassigned
128-255 Private Use [RFC 3547]
256-65535 Unassigned

SA KEK Payload Values - KEK_KEY_LENGTH

Registration Procedure(s)
Standards Action
Reference
[RFC 3547]
Note
The KEK_KEY_LENGTH class specifies the KEK Algorithm key
length (in bits).
Value Type Reference
No registrations at this time.

SA KEK Payload Values - KEK_KEY_LIFETIME

Registration Procedure(s)
Standards Action
Reference
[RFC 3547]
Value Type Reference
No registrations at this time.

SA KEK Payload Values - SIG_HASH_ALGORITHM

Registration Procedure(s)
Standards Action
Reference
[RFC 3547][RFC 6407]
Available Formats

CSV
Value Algorithm Type Reference
0 Reserved [RFC 3547]
1 SIG_HASH_MD5 [RFC 3547]
2 SIG_HASH_SHA1 [RFC 3547]
3 SIG_HASH_SHA256 [RFC 6407]
4 SIG_HASH_SHA384 [RFC 6407]
5 SIG_HASH_SHA512 [RFC 6407]
6-127 Unassigned
128-255 Private Use [RFC 3547]
256-65535 Unassigned

SA KEK Payload Values - SIG_ALGORITHM

Registration Procedure(s)
Standards Action
Reference
[RFC 3547][RFC 6407]
Available Formats

CSV
Value Algorithm Type Reference
0 Reserved [RFC 3547]
1 SIG_ALG_RSA [RFC 3547]
2 SIG_ALG_DSS [RFC 3547]
3 SIG_ALG_ECDSS [RFC 3547]
4 SIG_ALG_ECDSA-256 [RFC 6407]
5 SIG_ALG_ECDSA-384 [RFC 6407]
6 SIG_ALG_ECDSA-521 [RFC 6407]
7-127 Unassigned
128-255 Private Use [RFC 3547]
256-65535 Unassigned

SA KEK Payload Values - SIG_KEY_LENGTH

Registration Procedure(s)
Standards Action
Reference
[RFC 3547]
Note
The SIG_KEY_LENGTH class specifies the length of the SIG payload key.
Value Type Reference
No registrations at this time.

SA KEK Payload Values - KE_OAKLEY_GROUP

Registration Procedure(s)
Standards Action
Reference
[RFC 3547]
Value Type Reference
No registrations at this time.

SA KEK Payload Values - KEK_ACK_REQUESTED

Registration Procedure(s)
Specification Required
Expert(s)
Brian Weis
Reference
[RFC 8263]
Available Formats

CSV
Value Type Reference
0 Reserved [RFC 8263]
1 REKEY_ACK_KEK_SHA256 [RFC 8263]
2 REKEY_ACK_LKH_SHA256 [RFC 8263]
3 REKEY_ACK_KEK_SHA512 [RFC 8263]
4 REKEY_ACK_LKH_SHA512 [RFC 8263]
5-128 Unassigned
129-255 Private Use

SA TEK Payload Values

SA TEK Payload Values - Protocol-ID

Registration Procedure(s)
Standards Action
Reference
[RFC 3547]
Note
The SA_TEK protocol-ID is an 8-bit value that is used to describe the
type of TEK is included in the SA_TEK payload. The following table
defines values for the Security Protocol
Available Formats

CSV
Value Protocol ID Reference
0 RESERVED [RFC 3547]
1 GDOI_PROTO_IPSEC_ESP [RFC 3547]
2 GDOI_PROTO_IPSEC_AH [RFC 6407]
3 GDOI_PROTO_IEC_61850 [RFC 8052]
4-127 Unassigned [RFC 3547]
128-255 Private Use [RFC 3547]

Key Download Type Values

Registration Procedure(s)
Standards Action
Reference
[RFC 3547]
Note
The Key Download Type is an 8-bit value that is used as a discriminator
for interpretation of the variable-length Key Packet.
Available Formats

CSV
Value Key Download Type Reference
0 Reserved [RFC 3547]
1 TEK [RFC 3547]
2 KEK [RFC 3547]
3 LKH [RFC 3547]
4 SID [RFC 6407]
5-127 Unassigned [RFC 3547]
128-255 Private Use [RFC 3547]

TEK Download Type

Registration Procedure(s)
Standards Action
Reference
[RFC 3547][RFC 6407]
Available Formats

CSV
Value TEK Class Type Reference
0 RESERVED [RFC 3547]
1 TEK_ALGORITHM_KEY V [RFC 3547]
2 TEK_INTEGRITY_KEY V [RFC 3547]
3 TEK_SOURCE_AUTH_KEY V [RFC 3547]
4-127 Unassigned
128-255 Private Use [RFC 6407]
256-32767 Unassigned

KEK Download Type

Registration Procedure(s)
Standards Action
Reference
[RFC 3547][RFC 6407]
Note
The following attributes may be present in a KEK download Type. In the
table, attributes that are defined as TV are marked as Basic (B);
attributes which are defined as TLV are marked as Variable (V).
Available Formats

CSV
Value KEK Class Type Reference
0 RESERVED [RFC 3547]
1 KEK_ALGORITHM_KEY V [RFC 3547]
2 SIG_ALGORITHM_KEY V [RFC 3547]
3-127 Unassigned
128-255 Private Use [RFC 6407]
256-32767 Unassigned

LKH Download Type

Registration Procedure(s)
Standards Action
Reference
[RFC 3547]
Available Formats

CSV
Value KEK Class Type Reference
0 Reserved [RFC 3547]
1 LKH_DOWNLOAD_ARRAY V [RFC 3547]
2 LKH_UPDATE_ARRAY V [RFC 3547]
3 SIG_ALGORITHM_KEY V [RFC 3547]
4-127 Unassigned
128-255 Private Use [RFC 3547]
256-32767 Unassigned

SID Download Type

Registration Procedure(s)
Standards Action
Reference
[RFC 6407]
Available Formats

CSV
Value SID Class Type Reference
0 RESERVED [RFC 6407]
1 NUMBER_OF_SID_BITS B [RFC 6407]
2 SID_VALUE V [RFC 6407]
3-128 Unassigned
129-255 Private Use [RFC 6407]
256-32767 Unassigned

GAP Payload Policy Attributes

Registration Procedure(s)
Standards Action
Reference
[RFC 6407]
Available Formats

CSV
Value Attribute Type Type Reference
0 RESERVED [RFC 6407]
1 ACTIVATION_TIME_DELAY B [RFC 6407]
2 DEACTIVATION_TIME_DELAY B [RFC 6407]
3 SENDER_ID_REQUEST B [RFC 6407]
4-127 Unassigned
128-255 Private Use [RFC 6407]
256-32767 Unassigned

IEC 62351-9 Authentication Values

Registration Procedure(s)
Expert Review
Expert(s)
Brian Weis, Tero Kivinen
Reference
[RFC 8052]
Available Formats

CSV
Value Phase Reference
0 Reserved [RFC 8052]
1 NONE [RFC 8052]
2 HMAC-SHA256-128 [RFC 8052]
3 HMAC-SHA256 [RFC 8052]
4 AES-GMAC-128 [RFC 8052]
5 AES-GMAC-256 [RFC 8052]
6 HMAC-SHA-384 [Steffen_Fries]
7 HMAC-SHA-512 [Steffen_Fries]
8-61439 Unassigned
61440-65535 Reserved for Private Use [RFC 8052]

IEC 62351-9 Confidentiality Values

Registration Procedure(s)
Expert Review
Expert(s)
Brian Weis, Tero Kivinen
Reference
[RFC 8052]
Available Formats

CSV
Value Name Authenticated Encryption Reference
0 Reserved [RFC 8052]
1 NONE [RFC 8052]
2 AES-CBC-128 N [RFC 8052]
3 AES-CBC-256 N [RFC 8052]
4 AES-GCM-128 Y [RFC 8052]
5 AES-GCM-256 Y [RFC 8052]
6-61439 Unassigned
61440-65535 Reserved for Private Use [RFC 8052]

GDOI SA TEK Attributes

Registration Procedure(s)
Expert Review
Expert(s)
Brian Weis, Tero Kivinen
Reference
[RFC 8052]
Available Formats

CSV
Value Attribute Type Reference
0 Reserved [RFC 8052]
1 SA_ATD V [RFC 8052]
2 SA_KDA B [RFC 8052]
3-28671 Unassigned
28672-32767 Reserved for Private Use [RFC 8052]

ID Types

Registration Procedure(s)
Expert Review
Expert(s)
Brian Weis, Tero Kivinen
Reference
[RFC 8052]
Available Formats

CSV
Value Name Reference
0 Reserved [RFC 8052]
1 ID_IPV4_ADDR [RFC 8052]
2 ID_FQDN [RFC 8052]
3 ID_USER_FQDN [RFC 8052]
4 ID_IPV4_ADDR_SUBNET [RFC 8052]
5 ID_IPV6_ADDR [RFC 8052]
6 ID_IPV6_ADDR_SUBNET [RFC 8052]
7 ID_IPV4_ADDR_RANGE [RFC 8052]
8 ID_IPV6_ADDR_RANGE [RFC 8052]
9 ID_DER_ASN1_DN [RFC 8052]
10 ID_DER_ASN1_GN [RFC 8052]
11 ID_KEY_ID [RFC 8052]
12 ID_LIST [RFC 8052]
13 ID_OID [RFC 8052]
14-61439 Unassigned
61440-65535 Reserved for Private Use [RFC 8052]

GDOI DOI Exchange Types

Registration Procedure(s)
Specification Required
Expert(s)
Brian Weis
Reference
[RFC 8263]
Available Formats

CSV
Value Phase Reference
GROUPKEY-PULL 32 [RFC 6407]
GROUPKEY-PUSH 33 [RFC 6407]
Known Unregistered Use 34
GROUPKEY-PUSH-ACK 35 [RFC 8263]
Unassigned 36-239

Contact Information

ID Name Contact URI Last Updated
[Steffen_Fries] Steffen Fries mailto:steffen.fries&siemens.com 2026-07-06