IEEE P802.15

Wireless Specialty Networks

Title:	Ascon example frames for Annex C
Date Submitted:	2025-03-13
Name:	Tero Kivinen	Affiliation:	Wi-SUN Alliance	E-Mail	kivinen@iki.fi
Abstract:	Provide example IEEE Std 802.15.4 frames encrypted using Ascon cipher

Annex

Ascon

Beacon frame

This is same example as Annex C.2.2 of IEEE Std 802.15.4-2020, but intermediate steps are omitted.

MHR of the Beacon Frame with Frame Version of 0b01, and Security Enabled. Destination address is omitted. Source address is 0xacde480000000001 with Pan ID of 0x4321.

Auxiliary Security Header using security level of Mic64, Key Id Mode 0 - Implicit, Frame Counter of 0x00000005, using key of 0xc0c1c2c3c4c5c6c7c8c9cacbcccdcecf.

Nonce:

ac de 48 00 00 00 00 01 00 00 00 05 02

Beacon frame:

08 d0 84 21 43 01 00 00 00 00 48 de ac || 02 05 00 00 00 || 55 cf 00 00 51 52 53 54

Secured beacon frame:

08 d0 84 21 43 01 00 00 00 00 48 de ac || 02 05 00 00 00 || 55 cf 00 00 51 52 53 54 || f9 18 9a 51 02 9f 5f 86

MAC Command frame

This is same example as Annex C.2.3 of IEEE 802.15.4-2020, but intermediate steps are omitted.

MHR of the MAC Command Frame with Frame Version of 0b01, Security Enabled, and Ack Requested. Destination address is 0xacde480000000002 with Pan ID of 0x4321. Source address is 0xacde480000000001 with Pan ID of 0xffff.

Auxiliary Security Header using security level of Encrypted Mic64, Key Id Mode 0 - Implicit, Frame Counter of 0x00000005, using key of 0xc0c1c2c3c4c5c6c7c8c9cacbcccdcecf.

Nonce:

ac de 48 00 00 00 00 01 00 00 00 05 06

MAC Command frame:

2b dc 84 21 43 02 00 00 00 00 48 de ac ff ff 01 00 00 00 00 48 de ac || 06 05 00 00 00 || 01 ce

Secured MAC Command frame:

2b dc 84 21 43 02 00 00 00 00 48 de ac ff ff 01 00 00 00 00 48 de ac || 06 05 00 00 00 || 01 9d || a8 df 38 85 e5 14 cc 04

MAC Command frame

This is an example of Enhanced Beacon command using Enhanced Beacon Filter IE.

MHR of the MAC Command Frame with Frame Version of 0b10, Security Enabled, and IE Present. Destination address is 0xffff with Pan ID of 0x4321. Source address is 0xacde480000000001 with Pan ID of 0x4321.

Auxiliary Security Header using security level of Encrypted Mic128, Key Id Mode 0 - Implicit, Frame Counter of 0x00000006, using key of 0xc0c1c2c3c4c5c6c7c8c9cacbcccdcecf.

Nonce:

ac de 48 00 00 00 00 01 00 00 00 06 07

MAC Command frame:

0b ea 85 21 43 ff ff 21 43 01 00 00 00 00 48 de ac || 07 06 00 00 00 || 00 3f || 03 88 01 1e 01 00 f8 07

Secured MAC Command frame:

0b ea 85 21 43 ff ff 21 43 01 00 00 00 00 48 de ac || 07 06 00 00 00 || 00 3f || 93 34 11 e5 02 2f 2f 4a || 3d c9 da ac db e7 ed 64 e1 b6 aa a1 99 8e 71 72

MAC Command frame

This is same example as last one, but this one is using Pan ID Compression and will omit the source PAN ID.

MHR of the MAC Command Frame with Frame Version of 0b10, Security Enabled, PAN ID Compression, and IE Present. Destination address is 0xffff with Pan ID of 0x4321. Source address is 0xacde480000000001.

Auxiliary Security Header using security level of Encrypted Mic128, Key Id Mode 0 - Implicit, Frame Counter of 0x00000007, using key of 0xc0c1c2c3c4c5c6c7c8c9cacbcccdcecf.

Nonce:

ac de 48 00 00 00 00 01 00 00 00 07 07

MAC Command frame:

4b ea 86 21 43 ff ff 01 00 00 00 00 48 de ac || 07 07 00 00 00 || 00 3f || 03 88 01 1e 01 00 f8 07

Secured MAC Command frame:

4b ea 86 21 43 ff ff 01 00 00 00 00 48 de ac || 07 07 00 00 00 || 00 3f || b8 85 c3 3a 6d 5b d7 a0 || b3 c5 94 0a 2d 9e 49 9e 78 de 0f 91 05 28 49 9f

Enhanced Beacon frame

This is example of Enhanced Beacon used in the TSCH. This is just authenticated not encrypted, as TSCH beacons cannot be encrypted as the data in them is needed for joining the network. The security processing is bit more difficult as the recipient needs to know the ASN before it can verify the MIC of the frame. As this is TSCH Beacon this will include TSCH Synchronization IE inside which will tell the ASN. This frame is using ASN of 0x123456789a.

MHR of the Beacon Frame with Frame Version of 0b10, Security Enabled, PAN ID Compression, and IE Present. Destination address is 0xffff with Pan ID of 0x4321. Source address is 0xacde480000000001.

Auxiliary Security Header using security level of Mic128, Key Id Mode 1 with key index of 1, ASN 0x123456789a In Nonce, using key of 0xc0c1c2c3c4c5c6c7c8c9cacbcccdcecf.

Nonce:

ac de 48 00 00 00 00 01 12 34 56 78 9a

Beacon frame:

48 ea 87 21 43 ff ff 01 00 00 00 00 48 de ac || 6b 01 || 00 3f || 1a 88 06 1a 9a 78 56 34 12 04 01 1c 01 0a 1b 01 01 64 00 01 00 00 00 00 0f 01 c8 00

Secured Beacon frame:

48 ea 87 21 43 ff ff 01 00 00 00 00 48 de ac || 6b 01 || 00 3f || 1a 88 06 1a 9a 78 56 34 12 04 01 1c 01 0a 1b 01 01 64 00 01 00 00 00 00 0f 01 c8 00 || 86 3a 26 f3 0c 41 b9 4e c4 88 4d 00 ed 59 02 02

Data frame

This is example of Data frame using both header (not encrypted) and payload IEs (encrypted). This also uses PAN ID Compression of extended addresses, meaning there is no PAN ID at all. The header IE is Global Time IE, and the Payload IE is the Mac Metrics IE telling the number of octets sent. The contents of the data frame is string "This is data".

MHR of the Data Frame with Frame Version of 0b10, Security Enabled, Ack Requested, PAN ID Compression, and IE Present. Destination address is 0xacde480000000002. Source address is 0xacde480000000001.

Auxiliary Security Header using security level of Encrypted Mic64, Key Id Mode 1 with key index of 1, Frame Counter of 0x00000008, using key of 0xc0c1c2c3c4c5c6c7c8c9cacbcccdcecf.

Nonce:

ac de 48 00 00 00 00 01 00 00 00 08 06

Data frame:

69 ee 85 02 00 00 00 00 48 de ac 01 00 00 00 00 48 de ac || 0e 08 00 00 00 01 || 84 14 34 ff 3f 5c 00 3f || 07 88 05 1f 01 e8 03 00 00 00 f8 54 68 69 73 20 69 73 20 64 61 74 61

Secured Data frame:

69 ee 85 02 00 00 00 00 48 de ac 01 00 00 00 00 48 de ac || 0e 08 00 00 00 01 || 84 14 34 ff 3f 5c 00 3f || d6 8f 93 f6 0e 8d c5 d4 9f d7 5c a7 5d 3e 07 88 be 05 2f 3d 04 a7 62 || 6e 40 80 68 56 2d 4b 5c

Ack frame

This is an example of Ack frame using Header IEs and Data. The header IE used is the TSCH Time Correction IE, but this is not using the ASN in Nonce feature, so this is not exact TSCH ACK frame. The data in Ack simply says "ACK".

MHR of the Ack Frame with Frame Version of 0b10, Security Enabled, PAN ID Compression, Sequence Number Suppression, and IE Present. Destination address is 0xacde480000000002. Source address is 0xacde480000000001.

Auxiliary Security Header using security level of Encrypted Mic32, Key Id Mode 1 with key index of 1, Frame Counter of 0x00000009, using key of 0xc0c1c2c3c4c5c6c7c8c9cacbcccdcecf.

ACK Payload:

41 43 4b

Nonce:

ac de 48 00 00 00 00 01 00 00 00 09 05

Data frame:

4a ef 02 00 00 00 00 48 de ac 01 00 00 00 00 48 de ac || 0d 09 00 00 00 01 || 02 0f 01 00 80 3f || 41 43 4b

Secured ACK frame:

4a ef 02 00 00 00 00 48 de ac 01 00 00 00 00 48 de ac || 0d 09 00 00 00 01 || 02 0f 01 00 80 3f || c8 a1 8c || b1 56 e7 bf