IEC 62351 - Power Systems Communication Security 4:12: Part 4, native mode end-to-end application security (protected PDUs, association management, session keys)

In native mode the application PDUs are protected end to end: a security association is established with mutual authentication and key agreement, session keys derived (HKDF) and updated, and each PDU carried as a protected PDU with an integrity check value or authenticated encryption, with association management procedures for establishment, key update and release across intermediate entities; the TR 3.2 account of the model is the basis, the part's clause 12 and following not being held.