RADIUS attribute from rfc5904


PKM-Cryptosuite-List

The PKM-Cryptosuite-List Attribute is of type string  and
      is variable length; it corresponds roughly to the "Cryptographic-
      Suite-List" 802.16 attribute (see Section 11.19.15 of
      ), the difference being that the RADIUS
      Attribute contains only the list of 3-octet cryptographic suite
      identifiers, omitting the IEEE Type and Length fields.

      The PKM-Cryptosuite-List Attribute MAY be present in an Access-
      Request message.  Any message in which the PKM-Cryptosuite-List
      Attribute is present MUST also contain an instance of the Message-
      Authenticator Attribute .

      Implementation Note

         The PKM-Cryptosuite-List Attribute is used as a building block
         to create the 802.16 "Security-Capabilities" attribute
         (, Section 11.9.13); since this document only
         pertains to PKM version 1, the "Version" sub-attribute in that
         structure MUST be set to 0x01 when the RADIUS client constructs
         it.

   A summary of the PKM-Cryptosuite-List Attribute format is shown
   below.  The fields are transmitted from left to right.

                        1                   2                   3
    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
   |      Type     |      Len      |          Value...
   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

   Type

      140 for PKM-Cryptosuite-List

   Len

      2 + 3n < 39, where 'n' is the number of cryptosuite identifiers in
      the list.Value

      The Value field is variable length and contains a sequence of one
      or more cryptosuite identifiers, each of which is 3 octets in
      length and corresponds to the Value field of an IEEE 802.16
      Cryptographic-Suite attribute.