Back to matrix

F06-HP: Yes

Rationale

RFC 7402 specifies host-to-host ESP protection using HIP-derived keys. Selected transform 8 encrypts the payload with AES-128-CBC and authenticates it with HMAC-SHA-256.

Assessment method

Documentary classification, no new runtime or interoperability test

Source context

Primary RFCs and explicit selected composition; retained source bytes, 2026-10-15

Outstanding qualification

Selected encryption, not ESP NULL or authentication-only operation. Intermediate routers do not terminate the final-host security association; no new executable test.

Public sources

Editorial evidence references

The following identifiers refer to research records not included in this public package; they are not public links.