Subject: [AVTCORE] Conveying multiple EKT keys via SDES

From: "Paul E. Jones" <[email-masked]>
Date: Wed, 02 Sep 2015 16:13:52 +0000

John, et al,

Presently, the SDES part of the EKT spec allows for a single EKT 
parameter, defined as follows:

     ekt = "EKT=" cipher "|" key "|" spi

This make it impossible to send more than one EKT key, as identified 
using the SPI value.  Would we like to allow the exchange of multiple 
keys?  If so, I would suggest changing the syntax as follows:

     ekt = "EKT=" ekt-param *(";" ekt-param)
     ekt-param = cipher "|" key "|" spi

So, we could have parameters like this:

EKT=AESKW_128|WWVzQUxvdmVseUVLVGtleQ|3AE0;AESKW_128|VHdvTG92ZWx5RUtUa2V5cw|3AE1
Thoughts?

Paul