Part C Sample Data

1. Encryption sample data

This section contains sample data for the Low Energy encryption process.

The following scenario describes the start of encryption, followed by the transfer of an encrypted data physical channel data packet in each direction. It describes:

how the derived values are calculated (fixed values are given in red)
which HCI command and events are exchanged if HCI is used (given in italic)
which LL messages are exchanged over the air (given in green).

Note

Note: CRCs are not shown because they depend on a random CRC init value. Scrambling is disabled.

The following parameters are set to the fixed values below:

LTK = 0x4C68384139F574D836BCF34E9DFB01BF (MSO to LSO) EDIV = 0x2474 (MSO to LSO) RAND = 0xABCDEF1234567890 (MSO to LSO) SKD_C = 0xACBDCEDFE0F10213 (MSO to LSO) SKD_P = 0x0213243546576879 (MSO to LSO) IV_C = 0xBADCAB24 (MSO to LSO) IV_P = 0xDEAFBABE (MSO to LSO) HCI_LE_Enable_Encryption (length 0x1C) – Central HCI command HCI parameters as octet sequence: 00 08 90 78 56 34 12 ef cd ab 74 24 bf 01 fb 9d 4e f3 bc 36 d8 74 f5 39 41 38 68 4c Handle (2-octet value MSO to LSO) 0x0800 Random (8-octet value MSO to LSO) 0xabcdef1234567890 Encrypted Diversifier (2-octet value MSO to LSO) 0x2474 Long Term Key (16-octet value MSO to LSO) 0x4c68384139f574d836bcf34e9dfb01bf SKD_C (LSO to MSO) :0x13:0x02:0xF1:0xE0:0xDF:0xCE:0xBD:0xAC: IV_C (LSO to MSO) :0x24:0xAB:0xDC:0xBA LL_ENC_REQ 03 17 03 90 78 56 34 12 ef cd ab 74 24 13 02 f1 e0 df ce bd ac 24 ab dc ba Length 0x17 Control Type 0x03 Rand 90 78 56 34 12 ef cd ab EDIV 74 24 SKD_C 13 02 f1 e0 df ce bd ac IV_C 24 ab dc ba SKD_P (LSO to MSO) :0x79:0x68:0x57:0x46:0x35:0x24:0x13:0x02: IV_P (LSO to MSO) :0xBE:0xBA:0xAF:0xDE LL_ENC_RSP 0b 0d 04 79 68 57 46 35 24 13 02 be ba af de Length 0x0D Control Type 0x04 SKD_P 79 68 57 46 35 24 13 02 IV_P be ba af de IV = IV_P || IV_C IV (LSO to MSO) :0x24:0xAB:0xDC:0xBA:0xBE:0xBA:0xAF:0xDE HCI_Long_Term_Key_Request(length 0x0D) – Peripheral event HCI parameters as octet sequence: 05 01 08 90 78 56 34 12 ef cd ab 74 24 LE_Event_Code 0x05 Handle (2-octet value MSO to LSO) 0x0801 Random (8-octet value MSO to LSO) 0xabcdef1234567890 Encrypted Diversifier (2-octet value MSO to LSO) 0x2474 HCI_LE_Long_Term_Key_Request_Reply (length 0x12) – Peripheral command HCI parameters as octet sequence: 01 08 bf 01 fb 9d 4e f3 bc 36 d8 74 f5 39 41 38 68 4c Handle (2-octet value MSO to LSO) 0x0801 Key (16-octet value MSO to LSO) 0x4C68384139F574D836BCF34E9DFB01BF SKD = SKD_P || SKD_C SKD (LSO to MSO) :0x13:0x02:0xF1:0xE0:0xDF:0xCE:0xBD:0xAC:0x79:0x68:0x57:0x46:0x35:0x24:0x13:0x02: SK = Encrypt(LTK, SKD) SK (LSO to MSO) :0x66:0xC6:0xC2:0x27:0x8E:0x3B:0x8E:0x05:0x3E:0x7E:0xA3:0x26:0x52:0x1B:0xAD:0x99: LL_START_ENC_REQ 07 01 05 Length 0x01 Control Type 0x05 LL_START_ENC_RSP1 0f 05 9f cd a7 f4 48 Length 0x05 Control Type Encrypted:0x9F Clear:0x06 MIC (32-bit value MSO to LSO) 0xCDA7F448 (Note: MICs are sent MSO first on the air) LL_START_ENC_RSP2 07 05 a3 4c 13 a4 15 Length 0x05S Control Type Encrypted:0xA3 Clear:0x06 MIC (32-bit value MSO to LSO) 0x4C13A415 HCI_ACL_Data packet Central's Host to Controller 00 08 1b 00 17 00 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 31 32 33 34 35 36 37 38 39 30 Handle (12-bit value MSO to LSO) 0x0800 Data Total Length (16-bit value MSO to LSO) 0x001B (27 dec) Data (LSO to MSO) 17 00 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 31 32 33 34 35 36 37 38 39 30 LL_DATA1 0e 1f 7a 70 d6 64 15 22 6d f2 6b 17 83 9a 06 04 05 59 6b d6 56 4f 79 6b 5b 9c e6 ff 32 f7 5a 6d 33 Length 0x1F (i.e. 27 + 4 = 31 dec) Data (LSO to MSO) Clear 17 00 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 31 32 33 34 35 36 37 38 39 30 Encrypted 7a 70 d6 64 15 22 6d f2 6b 17 83 9a 06 04 05 59 6b d6 56 4f 79 6b 5b 9c e6 ff 32 MIC (32-bit value MSO to LSO) 0xF75A6D33 HCI_ACL_Data_Packet Peripheral's Host to Controller 01 08 1b 00 17 00 37 36 35 34 33 32 31 30 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 Handle (12-bit value MSO to LSO) 0x0801 Data Total Length (16-bit value MSO to LSO) 0x001B (27 dec) Data (LSO to MSO) 17 00 37 36 35 34 33 32 31 30 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 LL_DATA2 06 1f f3 88 81 e7 bd 94 c9 c3 69 b9 a6 68 46 dd 47 86 aa 8c 39 ce 54 0d 0d ae 3a dc df 89 b9 60 88 Length 0x1F (i.e. 27 + 4 = 31 dec) Data (LSO to MSO) Clear 17 00 37 36 35 34 33 32 31 30 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 Encrypted f3 88 81 e7 bd 94 c9 c3 69 b9 a6 68 46 dd 47 86 aa 8c 39 ce 54 0d 0d ae 3a dc df MIC (32-bit value MSO to LSO) 0x89B96088

1.1. Encrypt Command

HCI_LE_Encrypt (length 0x20) – command HCI parameters as octet sequence: bf 01 fb 9d 4e f3 bc 36 d8 74 f5 39 41 38 68 4c 13 02 f1 e0 df ce bd ac 79 68 57 46 35 24 13 02 Key (16-octet value MSO to LSO): 0x4C68384139F574D836BCF34E9DFB01BF Plaintext_Data (16-octet value MSO to LSO): 0x0213243546576879acbdcedfe0f10213 HCI_Command_Complete (length 0x14) – event HCI parameters as octet sequence: 02 17 20 00 66 c6 c2 27 8e 3b 8e 05 3e 7e a3 26 52 1b ad 99 Num_HCI_Command_Packets: 0x02 Command_Opcode (2-octet value MSO to LSO): 0x2017 Status: 0x00 Encrypted_Data (16-octet value MSO to LSO): 0x99ad1b5226a37e3e058e3b8e27c2c666

1.2. Derivation of the MIC and encrypted data

All B/X/A/S values below follow the notation: LSbyte to MSbyte & msbit to lsbit.

IV = DEAFBABEBADCAB24 SK = 99AD1B5226A37E3E058E3B8E27C2C666 1.START_ENC_RSP1 (packet 0, Central → Peripheral) ---------------- B0 = 49000000008024ABDCBABEBAAFDE0001 B1 = 00010300000000000000000000000000 B2 = 06000000000000000000000000000000 X1 = 712eaaaae60603521d245e50786eefe4 X2 = debc43782a022675fca0aa6f0854f1ab X3 = 6399913fede5fa111bdb993bbfb9be06 => MIC = 6399913f A0 = 01000000008024ABDCBABEBAAFDE0000 A1 = 01000000008024ABDCBABEBAAFDE0001 S0 = ae3e6577f64a8f25408c9c10d53acf8e S1 = 99190d88f4aa1b60b97ecfe6f5fee777 So, encrypted packet payload = 9F encrypted MIC = CDA7F448 Which results in the following packet: LL_START_ENC_RSP1 - 0f 05 9f cd a7 f4 48 Length: 05 Control Type: Clear: 06 Encrypted: 9f MIC: CD A7 F4 48 2.START_ENC_RSP2 (packet 0, Peripheral → Central) ---------------- B0 = 49000000000024ABDCBABEBAAFDE0001 B1 = 00010300000000000000000000000000 B2 = 06000000000000000000000000000000 X1 = ddc86e3094f0c29cf341ef4c2c1e0088 X2 = fe960f5c93fba45a53959842ea8a0c0a X3 = db403db3a32f39156faf6a6b472e1010 => MIC = db403db3 A0 = 01000000000024ABDCBABEBAAFDE0000 A1 = 01000000000024ABDCBABEBAAFDE0001 S0 = 975399a66acdc39124886930d7bca95f S1 = a5add4127b2f43788ddc9cd86b0b89d2 So, encrypted packet payload = A3 encrypted MIC = 4c13a415 Which results in the following packet: LL_START_ENC_RSP2 07 05 a3 4c 13 a4 15 Length: 05 Control Type: Clear: 06 Encrypted: A3 MIC: 4c 13 a4 15 3. Data packet1 (packet 1, Central → Peripheral) --------------- B0 = 49010000008024ABDCBABEBAAFDE001B B1 = 00010200000000000000000000000000 B2 = 1700636465666768696A6B6C6D6E6F70 B3 = 71313233343536373839300000000000 X1 = 7c688612996de101f3eacb68b443969c X2 = e3f1ef5c30161c0a9ec07274a0757fc8 X3 = e7e346f5b7c8a6072890a60dcf4ec20a X4 = 3db113320b182f9fed635db14cac2df0 => MIC = 3db11332 A0 = 01010000008024ABDCBABEBAAFDE0000 A1 = 01010000008024ABDCBABEBAAFDE0001 A2 = 01010000008024ABDCBABEBAAFDE0002 S0 = caeb7e017296dd2fa9a2ce789179501a S1 = 6d70b50070440a9a027de8f66b6a6a29 S2 = 1ae7647c4d5e6dabdec602404c302341 So, encrypted packet payload = 7A70D66415226DF26B17839A060405596BD6564F796B5B9CE6FF32 encrypted MIC = F75A6D33 which results in the following packet: LL_DATA1 0E 1F 7A 70 D6 64 15 22 6D F2 6B 17 83 9A 06 04 05 59 6B D6 56 4F 79 6B 5B 9C E6 FF 32 F7 5A 6D 33 Length: 1F Data: Clear: 17 00 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 31 32 33 34 35 36 37 38 39 30 Encrypted: 7A 70 D6 64 15 22 6D F2 6B 17 83 9A 06 04 05 59 6B D6 56 4F 79 6B 5B 9C E6 FF 32 MIC: F7 5A 6D 33 4. Data packet2 (packet 1, Peripheral → Central) --------------- B0 = 49010000000024ABDCBABEBAAFDE001B B1 = 00010200000000000000000000000000 B2 = 17003736353433323130414243444546 B3 = 4748494A4B4C4D4E4F50510000000000 X1 = 714234d50d6f1da5663be3e78460ad87 X2 = 96df1d97959e6176ac215c7baf90c674 X3 = 6cc52c3dcecdc2fa81eb347887960673 X4 = a776a26be617366496c391e36f6374a1 => MIC = a776a26b A0 = 01010000000024ABDCBABEBAAFDE0000 A1 = 01010000000024ABDCBABEBAAFDE0001 A2 = 01010000000024ABDCBABEBAAFDE0002 S0 = 2ecfc2e31e01875653c0f306fc7bfb96 S1 = e488b6d188a0faf15889e72a059902c0 S2 = edc470841f4140e0758c8e8f708399bd So, encrypted packet payload = F38881E7BD94C9C369B9A66846DD4786AA8C39CE540D0DAE3ADCDF encrypted MIC = 89B96088 Which results in the following packet: LL_DATA2 06 1F F3 88 81 E7 BD 94 C9 C3 69 B9 A6 68 46 DD 47 86 AA 8C 39 CE 54 0D 0D AE 3A DC DF 89 B9 60 88 Length: 1F Data: Clear: 17 00 37 36 35 34 33 32 31 30 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 Encrypted: F3 88 81 E7 BD 94 C9 C3 69 B9 A6 68 46 DD 47 86 AA 8C 39 CE 54 0D 0D AE 3A DC DF MIC: 89 B9 60 88

2. LE Coded PHY sample data

Whenever bits are specified, they are in transmission order irrespective of spacing.

2.1. Reference information packet

The reference packet is described as bytes in transmission order (the leftmost byte in a line is transmitted first). Inside a byte, bits are transmitted LSB first.

Access address: D6 BE 89 8E PDU: 00 03 42 4C 45 CRC: 29 0A CE

2.2. Forward Error Correction encoder

This data shows the bits input to and output by the FEC encoder and its internal state.

The encoder state is expressed in octal notation where the LSB represents the rightmost bit store in Figure 3.6 of [Vol 6] Part B, Section 3.3.1. The state specified is that after the bits are output and the shift operations have taken place.

Access address Input: 0 1 1 0 1 0 1 1 0 1 1 1 1 1 0 1 1 0 0 1 0 0 0 1 0 1 1 1 0 0 0 1 State: 0 4 6 3 5 2 5 6 3 5 6 7 7 7 3 5 6 3 1 4 2 1 0 4 2 5 6 7 3 1 0 4 Output: 0 0 1 1 0 1 0 1 1 1 0 1 0 0 1 0 0 1 1 1 1 0 1 0 0 1 0 1 1 0 1 1 1 0 0 1 0 0 0 0 1 0 1 1 1 1 1 1 1 0 0 0 1 0 1 0 1 0 0 0 1 1 1 1 CI If S=2 If S=8 Input: 1 0 0 0 State: 6 3 2 1 Output: 0 1 0 1 1 0 1 1 TERM1 If S=2 If S=8 Input: 0 0 0 0 0 0 State: 1 0 0 0 0 0 Output: 0 0 1 1 0 0 1 1 0 0 0 0 PDU Input: 0 0 0 0 0 0 0 0 1 1 0 0 0 0 0 0 0 1 0 0 0 0 1 0 0 0 1 1 0 0 1 0 1 0 1 0 0 0 1 0 State: 0 0 0 0 0 0 0 0 4 6 3 1 0 0 0 0 0 4 2 1 0 0 4 2 1 0 4 6 3 1 4 2 5 2 5 2 1 0 4 2 Output: 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 1 0 1 0 1 0 0 1 1 0 0 0 0 0 0 0 0 1 1 1 0 1 1 1 1 0 0 1 1 1 0 1 1 1 1 1 1 0 1 0 1 0 0 0 0 1 0 0 0 0 1 0 0 0 1 1 1 1 1 1 1 1 0 CRC Input: 1 0 0 1 0 1 0 0 0 1 0 1 0 0 0 0 0 1 1 1 0 0 1 1 State: 5 2 1 4 2 5 2 1 0 4 2 5 2 1 0 0 0 4 6 7 3 1 4 6 Output: 0 0 0 1 1 1 0 0 1 0 0 0 0 1 1 1 1 1 1 1 1 0 0 0 0 1 1 1 1 1 0 0 0 0 1 1 0 1 1 0 1 0 0 0 0 0 0 1 TERM2 Input: 0 0 0 State: 3 1 0 Output: 0 1 0 0 1 1

2.3. Transmitted symbols (S=2)

Preamble 0011 1100 0011 1100 0011 1100 0011 1100 0011 1100 0011 1100 0011 1100 0011 1100 0011 1100 0011 1100 Access Address 0011 0011 1100 1100 0011 1100 0011 1100 1100 1100 0011 1100 0011 0011 1100 0011 0011 1100 1100 1100 1100 0011 1100 0011 0011 1100 0011 1100 1100 0011 1100 1100 1100 0011 0011 1100 0011 0011 0011 0011 1100 0011 1100 1100 1100 1100 1100 1100 1100 0011 0011 0011 1100 0011 1100 0011 1100 0011 0011 0011 1100 1100 1100 1100 CI 0011 1100 0011 1100 TERM1 0011 0011 1100 1100 0011 0011 PDU 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 1 0 1 0 1 0 0 1 1 0 0 0 0 0 0 0 0 1 1 1 0 1 1 1 1 0 0 1 1 1 0 1 1 1 1 1 1 0 1 0 1 0 0 0 0 1 0 0 0 0 1 0 0 0 1 1 1 1 1 1 1 1 0 CRC 0 0 0 1 1 1 0 0 1 0 0 0 0 1 1 1 1 1 1 1 1 0 0 0 0 1 1 1 1 1 0 0 0 0 1 1 0 1 1 0 1 0 0 0 0 0 0 1 TERM2 0 1 0 0 1 1

Total Packet Duration 510 µs

2.4. Transmitted symbols (S=8)

Preamble 0011 1100 0011 1100 0011 1100 0011 1100 0011 1100 0011 1100 0011 1100 0011 1100 0011 1100 0011 1100 Access Address 0011 0011 1100 1100 0011 1100 0011 1100 1100 1100 0011 1100 0011 0011 1100 0011 0011 1100 1100 1100 1100 0011 1100 0011 0011 1100 0011 1100 1100 0011 1100 1100 1100 0011 0011 1100 0011 0011 0011 0011 1100 0011 1100 1100 1100 1100 1100 1100 1100 0011 0011 0011 1100 0011 1100 0011 1100 0011 0011 0011 1100 1100 1100 1100 CI 1100 0011 1100 1100 TERM1 1100 1100 0011 0011 0011 0011 PDU 0011 0011 0011 0011 0011 0011 0011 0011 0011 0011 0011 0011 0011 0011 0011 0011 1100 1100 0011 1100 0011 1100 0011 0011 1100 1100 0011 0011 0011 0011 0011 0011 0011 0011 1100 1100 1100 0011 1100 1100 1100 1100 0011 0011 1100 1100 1100 0011 1100 1100 1100 1100 1100 1100 0011 1100 0011 1100 0011 0011 0011 0011 1100 0011 0011 0011 0011 1100 0011 0011 0011 1100 1100 1100 1100 1100 1100 1100 1100 0011 CRC 0011 0011 0011 1100 1100 1100 0011 0011 1100 0011 0011 0011 0011 1100 1100 1100 1100 1100 1100 1100 1100 0011 0011 0011 0011 1100 1100 1100 1100 1100 0011 0011 0011 0011 1100 1100 0011 1100 1100 0011 1100 0011 0011 0011 0011 0011 0011 1100 TERM2 0011 1100 0011 0011 1100 1100

Total Packet Duration 912 µs

3. LE Channel Selection algorithm #2 sample data

This section contains two sets of sample data with different channel maps for the LE Channel Selection Algorithm #2.

The test access address is 0x8E89BED6, meaning the channelIdentifier is 0x305F.

3.1. Sample data 1 (37 used channels)

Channel map [36:0] = 0b11111_11111111_11111111_11111111_11111111.

The minimum channel distance d = 11.

	Event Counter	0	1	2	3
ACL or Periodic advertising event / CIS or BIS subevent 1	prn_e	56857	1685	38301	27475
	unmappedChannel	25	20	6	21
	mappedChannel¹	25	20	6	21
Subevent 2	remappingIndexOfLastUsedChannel	25	20	6	21
	prnSubEvent_se	11710	20925	6541	40400
	subEventIndex	1	36	18	4
	mappedSubEventChannel¹	1	36	18	4
Subevent 3	prnSubEvent_se	16649	11081	14597	30015
	subEventIndex	16	12	32	22
	mappedSubEventChannel¹	16	12	32	22
Subevent 4	prnSubEvent_se	38198	48920	62982	49818
	subEventIndex	36	34	21	8
	mappedSubEventChannel¹	36	34	21	8
¹These values are the general purpose channel indices actually used for transmitting and receiving the relevant event or subevent.

Table 3.1: Sample data 1 (37 used channels)

3.2. Sample data 2 (9 used channels)

Channel map [36:0] =0b11110_00000000_11100000_00000110_00000000.

The remapping table is [9, 10, 21, 22, 23, 33, 34, 35, 36].

The minimum channel distance d = 3.

	Event Counter	6	7	8
ACL or Periodic advertising event / CIS or BIS subevent 1	prn_e	10975	5490	46970
	unmappedChannel	23	14	17
	mappedChannel¹	23	9	34
Subevent 2	remappingIndexOfLastUsedChannel	4	0	6
	prnSubEvent_se	14383	4108	7196
	subEventIndex	7	3	0
	mappedSubEventChannel¹	35	22	9
Subevent 3	prnSubEvent_se	28946	45462	33054
	subEventIndex	2	8	5
	mappedSubEventChannel¹	21	36	33
Subevent 4	prnSubEvent_se	61038	64381	42590
	subEventIndex	8	5	1
	mappedSubEventChannel¹	36	33	10
¹These values are the general purpose channel indices actually used for transmitting and receiving the relevant event or subevent.

Table 3.2: Sample data (9 Used channels)

3.3. Sample data 3 (3 used channels)

Channel map [36:0] = 0b00000_00000000_00000000_00000001_00000110.

The remapping table is [1, 2, 8].

The minimum channel distance d = 1.

	Event Counter	11	12	13
ACL or Periodic advertising event / CIS or BIS subevent 1	prn_e	8628	34748	22072
	unmappedChannel	7	5	20
	mappedChannel¹	1	2	2
Subevent 2	remappingIndexOfLastUsedChannel	0	1	1
	prnSubEvent_se	30457	51913	13818
	subEventIndex	1	0	2
	mappedSubventChannel¹	2	1	8
Subevent 3	prnSubEvent_se	35147	46599	60171
	subEventIndex	0	2	1
	mappedSubventChannel¹	1	8	2
Subevent 4	prnSubEvent_se	36952	37702	36470
	subEventIndex	2	1	0
	mappedSubventChannel¹	8	2	1
¹These values are the general purpose channel indices actually used for transmitting and receiving the relevant event or subevent.

Table 3.3: Sample data (3 Used channels)

4. Complete packets

Examples in this section assume use of the LE 1M PHY. For the LE 2M PHY, the packet will be identical except for the longer preamble and longer (in number of bits) Constant Tone Extension. For the LE Coded PHY, examples of converting from the form used on the uncoded PHYs to those used on the air are shown in Section 2.

Bit sequences are always in transmission order irrespective of spacing. Decimal and hexadecimal numbers are in their normal form.

4.1. Whitening sequences

The whitening sequence (see [Vol 6] Part B, Section 3.2) depends only on the physical channel index of the channel being used. The sequence repeats after 127 bits.

Channel First 64 bits of the whitening sequence 0 00000010 01001101 00111101 11000011 11111000 11101100 01010010 11111010 1 10010001 00000010 01001101 00111101 11000011 11111000 11101100 01010010 2 01001011 11101010 10000101 10111100 11100101 01100110 00001101 10101110 3 11011000 10100101 11110101 01000010 11011110 01110010 10110011 00000110 4 00100110 10011110 11100001 11111100 01110110 00101001 01111101 01010000 5 10110101 11010001 10010001 00000010 01001101 00111101 11000011 11111000 6 01101111 00111001 01011001 10000011 01101011 10100011 00100010 00000100 7 11111100 01110110 00101001 01111101 01010000 10110111 10011100 10101100 8 00010000 00100100 11010011 11011100 00111111 10001110 11000101 00101111 9 10000011 01101011 10100011 00100010 00000100 10011010 01111011 10000111 10 01011001 10000011 01101011 10100011 00100010 00000100 10011010 01111011 11 11001010 11001100 00011011 01011101 00011001 00010000 00100100 11010011 12 00110100 11110111 00001111 11100011 10110001 01001011 11101010 10000101 13 10100111 10111000 01111111 00011101 10001010 01011111 01010100 00101101 14 01111101 01010000 10110111 10011100 10101100 11000001 10110101 11010001 15 11101110 00011111 11000111 01100010 10010111 11010101 00001011 01111001 16 00001011 01111001 11001010 11001100 00011011 01011101 00011001 00010000 17 10011000 00110110 10111010 00110010 00100000 01001001 10100111 10111000 18 01000010 11011110 01110010 10110011 00000110 11010111 01000110 01000100 19 11010001 10010001 00000010 01001101 00111101 11000011 11111000 11101100 20 00101111 10101010 00010110 11110011 10010101 10011000 00110110 10111010 21 10111100 11100101 01100110 00001101 10101110 10001100 10001000 00010010 22 01100110 00001101 10101110 10001100 10001000 00010010 01101001 11101110 23 11110101 01000010 11011110 01110010 10110011 00000110 11010111 01000110 24 00011001 00010000 00100100 11010011 11011100 00111111 10001110 11000101 25 10001010 01011111 01010100 00101101 11100111 00101011 00110000 01101101 26 01010000 10110111 10011100 10101100 11000001 10110101 11010001 10010001 27 11000011 11111000 11101100 01010010 11111010 10100001 01101111 00111001 28 00111101 11000011 11111000 11101100 01010010 11111010 10100001 01101111 29 10101110 10001100 10001000 00010010 01101001 11101110 00011111 11000111 30 01110100 01100100 01000000 10010011 01001111 01110000 11111110 00111011 31 11100111 00101011 00110000 01101101 01110100 01100100 01000000 10010011 32 00000110 11010111 01000110 01000100 00001001 00110100 11110111 00001111 33 10010101 10011000 00110110 10111010 00110010 00100000 01001001 10100111 34 01001111 01110000 11111110 00111011 00010100 10111110 10101000 01011011 35 11011100 00111111 10001110 11000101 00101111 10101010 00010110 11110011 36 00100010 00000100 10011010 01111011 10000111 11110001 11011000 10100101 37 10110001 01001011 11101010 10000101 10111100 11100101 01100110 00001101 38 01101011 10100011 00100010 00000100 10011010 01111011 10000111 11110001 39 11111000 11101100 01010010 11111010 10100001 01101111 00111001 01011001

4.2. Advertising Physical channel PDUs

4.2.1. Legacy advertising PDUs

Example: ADV_NONCONN_IND PDU

PDU Type: 2 ChSel: RFU TxAdd: 1 (random) RxAdd: RFU AdvA: 0xC1A2A3A4A5A6 (a static device address) AdvData: (3 octets) 0x01 0x02 0x03 Channel index: 38 PDU header: 0100 0 0 1 0 10010000 PDU body: 01100101 10100101 00100101 11000101 01000101 10000011 10000000 01000000 11000000 CRC: 10110101 00101101 11010111 PDU and CRC before whitening: 01000010 10010000 01100101 10100101 00100101 11000101 01000101 10000011 10000000 01000000 11000000 10110101 00101101 11010111 PDU and CRC after whitening: 00101001 00110011 01000111 10100001 10111111 10111110 11000010 01110010 01011000 11100101 00110101 11110111 11110011 10100101 Complete packet: 01010101 01101011 01111101 10010001 01110001 00101001 00110011 01000111 10100001 10111111 10111110 11000010 01110010 01011000 11100101 00110101 11110111 11110011 10100101

4.2.2. Extended advertising PDUs

Example: connectable undirected AUX_ADV_IND PDU with AdvA, ADI, TxPower, and AdvData fields.

PDU Type: 7 ChSel: RFU TxAdd: 0 (public) RxAdd: RFU AdvA: 0xA9AAABACADAE (a public device address) Advertising DID: 0xABC Advertising SID: 0xE TxPower: 0xD6 (-42 dBm) AdvData: (5 octets) 0x05 0x07 0x09 0x0B 0x0D Channel index: 7 PDU header: 1110 0 0 0 0 00001000 Extended header length: 010100 AdvMode: 10 Extended header: Flags: 1 0 0 1 0 0 1 0 AdvA: 01110101 10110101 00110101 11010101 01010101 10010101 ADI: 001111010101 0111 TxPower: 01101011 AdvData: 10100000 11100000 10010000 11010000 10110000 PDU: 11100000 00001000 01010010 10010010 01110101 10110101 00110101 11010101 01010101 10010101 00111101 01010111 01101011 10100000 11100000 10010000 11010000 10110000 CRC: 00011011 11000100 01110101 PDU and CRC after whitening: 00011100 01111110 01111011 11101111 00100101 00000010 10101001 01111001 10010100 00100000 11101100 11000110 01101001 11101101 11011101 01010011 00101000 01011100 01001001 00111110 11010100 Complete packet: 01010101 01101011 01111101 10010001 01110001 00011100 01111110 01111011 11101111 00100101 00000010 10101001 01111001 10010100 00100000 11101100 11000110 01101001 11101101 11011101 01010011 00101000 01011100 01001001 00111110 11010100

4.3. Data channel PDUs

Note

Note: The examples in this section are unencrypted. Examples of the encryption process can be seen in section 1.

4.3.1. LL data PDUs

Access address: 0xAA08192B CRCInit: 0xC4C181 LLID: 2 NESN: 1 SN: 0 MD: 1 Payload: 0x01 0x02 0x03 0x04 0x05 No Constant Tone Extension Channel index 16 PDU header: 01 1 0 1 0 00 10100000 PDU: 01101000 10100000 10000000 01000000 11000000 00100000 10100000 CRC: 10100010 00001011 01001011 PDU and CRC after whitening: 01100011 11011001 01001010 10001100 11011011 01111101 10111001 10110010 00101111 10011000 Complete packet: 10101010 11010100 10011000 00010000 01010101 01100011 11011001 01001010 10001100 11011011 01111101 10111001 10110010 00101111 10011000

4.3.2. LL control PDUs

Access address: 0xAA173C42 CRCInit: 0xCD3F6C Type: LL_CHANNEL_MAP_IND NESN: 0 SN: 1 MD: 1 Map: channels 2, 5, and 33 to 36 unused, all other channels used Instant: 0x4321 AoD Constant Tone Extension, length 40 μs, 2 μs switching and sampling Channel index 29 PDU header: 11 0 1 1 1 00 00010000 10100 0 01 PDU: 11011100 00010000 10100001 10000000 11011011 11111111 11111111 11111111 10000000 10000100 11000010 CRC: 10011100 01000111 00101001 PDU and CRC after whitening: 01110010 10011100 00101001 10010010 10110010 00010001 11100000 00111000 11100010 00010011 00010111 10010111 00111110 11100011 Complete packet: 01010101 01000010 00111100 11101000 01010101 01110010 10011100 00101001 10010010 10110010 00010001 11100000 00111000 11100010 00010011 00010111 10010111 00111110 11100011 11111111 11111111 11111111 11111111 11111111

5. Access Address generation for BISes

The Access Addresses for the various BISes in a BIG with the SeedAccessAddress 0x78E52493 are:

Num_BIS	Access Address
1	0x85E32493
2	0x79D52493
3	0x86752493
4	0x7A572493
5	0x85F12493
6	0x79D32493
7	0x86732493
8	0x7B652493
9	0x85C72493
10	0x78E12493
11	0x86412493
12	0x7B632493
13	0x85D52493
14	0x78F72493
15	0x86572493
16	0x7B712493
17	0x85D32493
18	0x78C52493
19	0x87652493
20	0x7B472493
21	0x84E12493
22	0x78C32493
23	0x87632493
24	0x7B552493
25	0x84F72493
26	0x78D12493
27	0x87712493
28	0x7B532493
29	0x84C52493
30	0x79E72493
31	0x87472493

Table 5.1: Access Address generation for BISes

The Access Address of the BIG Control logical link is 0x7A412493.

6. Group Session Key derivation for BIG

In each data set in this section, the bytes are ordered from most significant on the left to least significant on the right.

Group Session Key Derivation Function h8

K ec0234a3 57c8ad05 341010a6 0a397d9b S 1536d18d e3d20df9 9b7044c1 2f9ed5ba keyID cc030148 IK fe77ab4e fa982991 c1486a3b 281fd4bc h8 e5e5beba ae7228e7 22a38904 ed350f6d

Derivation of Group Session Key from Broadcast Code

Bluetooth Broadcast Code: "Børne House" Broadcast Code 00000000 6573756f 4820656e 72b8c342 GSKD 55188b3d 32f6bb9a 900afcfb eed4e72a "BIG1" 00000000 00000000 00000000 42494731 "BIG2" 42494732 "BIG3" 42494733 IGLTK 4c0dd74c 2b19aa95 d8982385 5f1001b8 GLTK c4cd4b83 49b5a18a 02de6620 9017aed3 GSK be2a16fc 7ac464e7 52301bcc c818812c

7. Deterministic Random Bit Generator sample data

This section contains sample data for the Deterministic Random Bit Generator.

The following scenarios provide sample entropy input for the h9() instantiation function, which then invokes several subordinate security toolbox functions described in [Vol 6] Part E, Section 3. After this, CS procedure counters, step counters, transaction IDs, and transaction counters are incremented for further iterations of sample data. The CS Backtracking procedure is also invoked to generate additional sample data.

Unless otherwise noted, all fields are displayed in leftmost (MSO) to rightmost (LSO) orientation as described in [Vol 6] Part E, Section 3.1.1.

******************************** INSTANTIATION FUNCTION ********************************* h9() instantiation ***************************************************************************************** Entropy input Peripheral (CS_IV_P): E1 0B C2 8A 0B FD DF E9 Entropy input Central (CS_IV_C): 3E 7F 51 86 E0 CA 0B 3B Entropy input (CS_IV): E1 0B C2 8A 0B FD DF E9 3E 7F 51 86 E0 CA 0B 3B Nonce Peripheral(CS_IN_P): 9F F4 77 C1 Nonce Central(CS_IN_C): 86 73 84 0D Nonce (CS_IN): 9F F4 77 C1 86 73 84 0D Personalization string Peripheral (CS_PV_P): C9 80 DE DF 98 82 ED 44 Personalization string Central (CS_PV_C): 64 A6 74 96 78 68 F1 43 Personalization string (CS_PV): C9 80 DE DF 98 82 ED 44 64 A6 74 96 78 68 F1 43 *********************** f8 function start ********************** **************************** f7 function start *************************** f7 K input: 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F f7 V||S input: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 28 00 00 00 20 E1 0B C2 8A 0B FD DF E9 3E 7F 51 86 E0 CA 0B 3B 9F F4 77 C1 86 73 84 0D C9 80 DE DF 98 82 ED 44 64 A6 74 96 78 68 F1 43 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f7 K2 output: 8B 2B 06 DC 52 2D 3E 0A F0 A5 0C AF 48 10 E0 35 **************************** f7 function end ***************************** **************************** f7 function start *************************** f7 K input: 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F f7 V||S input: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 28 00 00 00 20 E1 0B C2 8A 0B FD DF E9 3E 7F 51 86 E0 CA 0B 3B 9F F4 77 C1 86 73 84 0D C9 80 DE DF 98 82 ED 44 64 A6 74 96 78 68 F1 43 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f7 X output: A3 4F BE 57 F8 F9 7E 34 9D 15 A3 76 79 60 74 64 **************************** f7 function end ***************************** f8 SM output: B6 02 B1 B2 8C 6F 0A 3D DA E6 37 B4 84 25 08 7D DC 18 8C 89 A1 B0 CD FD A1 E8 FC 66 C9 99 97 50 ************************ f8 function end *********************** *********************************** FIRST PROCEDURE ************************************ K: EE E0 4D 7C 76 11 3A 5C EC 99 2A E3 20 C2 4D 27 V: DF 90 56 47 C1 06 6E 6F 52 C0 3E DF B8 2B 69 28 **************************************************************************************** Proc. cnt. = 0; Step cnt. = 0; Transaction ID = 0; Transaction cnt. = 0 Vcnt: DF 90 56 47 C1 06 6E 6F 52 C0 3E DF B8 2B 69 28 DRBG octets: 79 74 1F D1 8F 57 7B 45 D0 9A 66 5A 7F 1F 28 58 Proc. cnt. = 0; Step cnt. = 0; Transaction ID = 0; Transaction cnt. = 1 Vcnt: DF 90 56 47 C1 06 6E 6F 52 C0 3E DF B8 2B 69 29 DRBG octets: D1 C1 D0 5A 40 B4 C4 81 EF BB 39 B2 61 D2 9C 4E Proc. cnt. = 0; Step cnt. = 0; Transaction ID = 0; Transaction cnt. = 2 Vcnt: DF 90 56 47 C1 06 6E 6F 52 C0 3E DF B8 2B 69 2A DRBG octets: 71 FD E8 68 E8 CA CA D1 18 E5 9B 18 5C EE FC 17 Proc. cnt. = 0; Step cnt. = 10; Transaction ID = 4; Transaction cnt. = 0 Vcnt: DF 90 56 47 C1 06 6E 6F 52 C0 3E DF B8 35 6D 28 DRBG octets: FF F8 74 38 4E 1C B9 D3 E6 9F 1F 2C 2A 22 CF 63 ************************************* NEW PROCEDURE ************************************ Procedure counter increment; f9() update: V in: DF 90 56 47 C1 06 6E 6F 52 C0 3E DF B8 2B 69 28 V'=V[127:32] || V[31:16] || V[15:8]+T_ID9 || V[7:0] in: DF 90 56 47 C1 06 6E 6F 52 C0 3E DF B8 2B 72 28 **************************************************************************************** K: F3 F4 CF 24 5F CE 86 B3 C6 9F AE 60 28 7E B5 AE V: 08 56 98 94 89 1F 2F 30 1E EC DB 38 B6 ED 54 B1 **************************************************************************************** Proc. cnt. = 1; Step cnt. = 0; Transaction ID = 0; Transaction cnt. = 0 Vcnt: 08 56 98 94 89 1F 2F 30 1E EC DB 38 B6 ED 54 B1 DRBG octets: 5F 1B 11 5A 00 40 B4 2C 2F 8F B1 0C 9B 6F D7 AC Proc. cnt. = 1; Step cnt. = 0; Transaction ID = 0; Transaction cnt. = 1 Vcnt: 08 56 98 94 89 1F 2F 30 1E EC DB 38 B6 ED 54 B2 DRBG octets: 55 73 A6 A5 20 91 B1 58 99 C8 64 AB 2F B0 E2 02 Proc. cnt. = 1; Step cnt. = 0; Transaction ID = 0; Transaction cnt. = 2 Vcnt: 08 56 98 94 89 1F 2F 30 1E EC DB 38 B6 ED 54 B3 DRBG octets: 46 20 D2 01 B7 41 9D 82 48 68 D5 A7 C8 20 BA 2C Proc. cnt. = 1; Step cnt. = 14; Transaction ID = 4; Transaction cnt. = 0 Vcnt: 08 56 98 94 89 1F 2F 30 1E EC DB 38 B6 FB 58 B1 DRBG octets: B4 20 00 40 63 B1 13 A2 3E D0 43 D0 3B 6E E7 34 ************************************* NEW PROCEDURE ************************************ Procedure counter increment; f9() update: V in: 08 56 98 94 89 1F 2F 30 1E EC DB 38 B6 ED 54 B1 V'=V[127:32] || V[31:16] || V[15:8]+T_ID9 || V[7:0] in: 08 56 98 94 89 1F 2F 30 1E EC DB 38 B6 ED 5D B1 **************************************************************************************** K: A9 AA 68 C2 1D F4 09 00 1A F9 27 AC 14 C8 18 96 V: 16 07 DE 6C FC 80 D2 18 64 F7 08 A9 9C 49 39 96 **************************************************************************************** Proc. cnt. = 2; Step cnt. = 0; Transaction ID = 0; Transaction cnt. = 0 Vcnt: 16 07 DE 6C FC 80 D2 18 64 F7 08 A9 9C 49 39 96 DRBGoctets: 6A EA B7 5D 82 52 58 31 42 2C E2 F4 2E 85 07 88 Proc. cnt. = 2; Step cnt. = 1; Transaction ID = 0; Transaction cnt. = 0 Vcnt: 16 07 DE 6C FC 80 D2 18 64 F7 08 A9 9C 4A 39 96 DRBG octets: 14 40 EF 44 74 AF D8 49 32 FE 37 B0 A4 10 F2 3A Proc. cnt. = 2; Step cnt. = 2; Transaction ID = 0; Transaction cnt. = 0 Vcnt: 16 07 DE 6C FC 80 D2 18 64 F7 08 A9 9C 4B 39 96 DRBG octets: 2A 83 EF 11 CC E5 99 31 4E FB 29 03 F4 DF D4 B8 Proc. cnt. = 2; Step cnt. = 3; Transaction ID = 0; Transaction cnt. = 0 Vcnt: 16 07 DE 6C FC 80 D2 18 64 F7 08 A9 9C 4C 39 96 DRBG octets: 19 6B E2 B6 43 98 53 FE D4 96 67 54 E1 40 15 1E ************************************* NEW PROCEDURE ************************************ Procedure counter increment; f9() update: V in: 16 07 DE 6C FC 80 D2 18 64 F7 08 A9 9C 49 39 96 V'=V[127:32] || V[31:16] || V[15:8]+T_ID9 || V[7:0] in: 16 07 DE 6C FC 80 D2 18 64 F7 08 A9 9C 49 42 96 **************************************************************************************** K: 77 71 3B B1 81 C3 B6 44 29 E8 98 B8 65 9B 85 A9 V: D5 88 73 99 44 68 36 96 A9 3D 36 19 3C DA BA 11 **************************************************************************************** Proc. cnt. = 3; Step cnt. = 0; Transaction ID = 0; Transaction cnt. = 0 Vcnt: D5 88 73 99 44 68 36 96 A9 3D 36 19 3C DA BA 11 DRBG octets: 58 04 C1 73 69 C5 64 DC 73 D6 E7 4E A0 C6 E1 66

8. Channel Sounding procedure sample data

This section contains sample data for illustrative Channel Sounding procedures that make use of the Deterministic Random Bit Generator.

The data is generated as if the configuration and timing parameters listed in each subsection were negotiated or derived during the CS Configuration procedure ([Vol 6] Part B, Section 5.1.25 and [Vol 6] Part B, Section 2.4.2.45) and the CS Start procedure ([Vol 6] Part B, Section 5.1.26 and [Vol 6] Part B, Section 2.4.2.47).

The following scenarios provide sample entropy input for the h9() instantiation function, which then invokes several subordinate security toolbox functions described in [Vol 6] Part E, Section 3. After this, CS procedure counters, step counters, transaction IDs, and transaction counters are incremented for further iterations of sample data.

Unless otherwise noted, all fields are displayed in leftmost (MSO) to rightmost (LSO) orientation as described in [Vol 6] Part E, Section 3.1.1.

8.1. Channel Selection Algorithm #3b

8.1.1. Set 1

From the CS Configuration procedure:

ChM = 0x00 00 00 00 00 00 00 1F FF FC
ChM_Repetition = 2
Main_Mode = 0x02
Sub_Mode = 0x03
Main_Mode_Min_Steps = 2
Main_Mode_Max_Steps = 6
Main_Mode_Repetition = 0
Mode_0_Steps = 3
RTT_Type = 0x01
Role = 0b01
ChSel = 0

From the CS Start procedure:

Subevent_Len – setup to include at least 20 steps
Procedure_Count = 1
ACI = 7

******************************** INSTANTIATION FUNCTION ********************************* h9() instantiation ***************************************************************************************** Entropy input Peripheral (CS_IV_P): E1 0B C2 8A 0B FD DF E9 Entropy input Central (CS_IV_C): 3E 7F 51 86 E0 CA 0B 3B Entropy input (CS_IV): E1 0B C2 8A 0B FD DF E9 3E 7F 51 86 E0 CA 0B 3B Nonce Peripheral (CS_IN_P): 9F F4 77 C1 Nonce Central(CS_IN_C): 86 73 84 0D Nonce (CS_IN): 9F F4 77 C1 86 73 84 0D Personalization string Peripheral (CS_PV_P): C9 80 DE DF 98 82 ED 44 Personalization string Central (CS_PV_C): 64 A6 74 96 78 68 F1 43 Personalization string (CS_PV): C9 80 DE DF 98 82 ED 44 64 A6 74 96 78 68 F1 43 *********************** f8 function start ********************** **************************** f7 function start *************************** f7 K input: 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F f7 V||S input: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 28 00 00 00 20 E1 0B C2 8A 0B FD DF E9 3E 7F 51 86 E0 CA 0B 3B 9F F4 77 C1 86 73 84 0D C9 80 DE DF 98 82 ED 44 64 A6 74 96 78 68 F1 43 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f7 K2 output: 8B 2B 06 DC 52 2D 3E 0A F0 A5 0C AF 48 10 E0 35 **************************** f7 function end ***************************** **************************** f7 function start *************************** f7 K input: 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F f7 V||S input: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 28 00 00 00 20 E1 0B C2 8A 0B FD DF E9 3E 7F 51 86 E0 CA 0B 3B 9F F4 77 C1 86 73 84 0D C9 80 DE DF 98 82 ED 44 64 A6 74 96 78 68 F1 43 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f7 X output: A3 4F BE 57 F8 F9 7E 34 9D 15 A3 76 79 60 74 64 **************************** f7 function end ***************************** f8 SM output: B6 02 B1 B2 8C 6F 0A 3D DA E6 37 B4 84 25 08 7D DC 18 8C 89 A1 B0 CD FD A1 E8 FC 66 C9 99 97 50 ************************ f8 function end *********************** ************************************ INITIAL K and V ************************************ K: EE E0 4D 7C 76 11 3A 5C EC 99 2A E3 20 C2 4D 27 V: DF 90 56 47 C1 06 6E 6F 52 C0 3E DF B8 2B 69 28 ***************************************************************************************** ************************************* CS SEQUENCE *************************************** ************************************** Channel map ************************************** Bit-map: 00 00 00 00 00 00 00 1F FF FC Filtered channels: 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 ***************************************************************************************** Step=0 | Mode=0 T_ID 1 - mode0 channel (0 bits): // - Range = // (decimal); hr1 = 0 (decimal) ********************************************************************** New DRBG octets: FF BC C1 CA 39 A6 9D C4 07 38 EF 33 D9 D1 35 32 ********************************************************************** T_ID 1 - mode0 channel (8 bits): FF - Range = 2 (decimal); hr1 = 1 (decimal) T_ID 1 - mode0 channel (8 bits): BC - Range = 3 (decimal); hr1 = 2 (decimal) T_ID 1 - mode0 channel (8 bits): C1 - Range = 4 (decimal); hr1 = 3 (decimal) T_ID 1 - mode0 channel (8 bits): CA - Range = 5 (decimal); hr1 = 3 (decimal) T_ID 1 - mode0 channel (8 bits): 39 - Range = 6 (decimal); hr1 = 1 (decimal) T_ID 1 - mode0 channel (8 bits): A6 - Range = 7 (decimal); hr1 = 4 (decimal) T_ID 1 - mode0 channel (8 bits): 9D - Range = 8 (decimal); hr1 = 4 (decimal) T_ID 1 - mode0 channel (8 bits): C4 - Range = 9 (decimal); hr1 = 6 (decimal) T_ID 1 - mode0 channel (8 bits): 07 - Range = 10 (decimal); hr1 = 0 (decimal) T_ID 1 - mode0 channel (8 bits): 38 - Range = 11 (decimal); hr1 = 2 (decimal) T_ID 1 - mode0 channel (8 bits): EF - Range = 12 (decimal); hr1 = 11 (decimal) T_ID 1 - mode0 channel (8 bits): 33 - Range = 13 (decimal); hr1 = 2 (decimal) T_ID 1 - mode0 channel (8 bits): D9 - Range = 14 (decimal); hr1 = 11 (decimal) T_ID 1 - mode0 channel (8 bits): D1 - Range = 15 (decimal); hr1 = 12 (decimal) T_ID 1 - mode0 channel (8 bits): 35 - Range = 16 (decimal); hr1 = 3 (decimal) T_ID 1 - mode0 channel (8 bits): 32 - Range = 17 (decimal); hr1 = 3 (decimal) ********************************************************************** New DRBG octets: 51 EE 4B B0 3E E6 D0 A1 71 87 1C 2E 60 46 8F 6C ********************************************************************** T_ID 1 - mode0 channel (8 bits): 51 - Range = 18 (decimal); hr1 = 5 (decimal) T_ID 1 - mode0 channel (8 bits): EE - Range = 19 (decimal); hr1 = 17 (decimal) T_ID 1 - Shuffled channels: 11 7 14 18 9 19 10 8 5 2 4 15 16 13 12 6 17 20 3 ********************************************************************** New DRBG octets: 0C 00 E4 AA 6C 37 6A B8 00 B8 C5 5D F0 79 BC 3A ********************************************************************** T_ID 5 - RTT AA candidates (128 bits): 0C 00 E4 AA 6C 37 6A B8 00 B8 C5 5D F0 79 BC 3A T_ID 5 - Initiator first 32-bit score: 12 T_ID 5 - Initiator second 32-bit score: 8 T_ID 5 - Initiator chosen PN pattern: 6C 37 6A B8 Access Address 0x6C376AB8 : 00011101 01010110 11101100 00110110 (Tx bit order, left to right) Followed by Trailer: 1010 (Tx bit order, left to right) T_ID 5 - Reflector first 32-bit score: 16 T_ID 5 - Reflector second 32-bit score: 16 T_ID 5 - Reflector chosen PN pattern: F0 79 BC 3A Access Address 0xF079BC3A : 01011100 00111101 10011110 00001111 (Tx bit order, left to right) Followed by Trailer: 0101 (Tx bit order, left to right) Step=1 | Mode=0 ********************************************************************** New DRBG octets: 01 1C AE 4E 99 47 D1 B5 D0 6A CD DA C7 F8 F9 37 ********************************************************************** T_ID 5 - RTT AA candidates (128 bits): 01 1C AE 4E 99 47 D1 B5 D0 6A CD DA C7 F8 F9 37 T_ID 5 - Initiator first 32-bit score: 6 T_ID 5 - Initiator second 32-bit score: 8 T_ID 5 - Initiator chosen PN pattern: 01 1C AE 4E T_ID 5 - Reflector first 32-bit score: 10 T_ID 5 - Reflector second 32-bit score: 14 T_ID 5 - Reflector chosen PN pattern: D0 6A CD DA Step=2 | Mode=0 ********************************************************************** New DRBG octets: 64 06 12 14 86 05 AF EA 71 55 0B DD 28 94 2F 38 ********************************************************************** T_ID 5 - RTT AA candidates (128 bits): 64 06 12 14 86 05 AF EA 71 55 0B DD 28 94 2F 38 T_ID 5 - Initiator first 32-bit score: 10 T_ID 5 - Initiator second 32-bit score: 12 T_ID 5 - Initiator chosen PN pattern: 64 06 12 14 T_ID 5 - Reflector first 32-bit score: 28 T_ID 5 - Reflector second 32-bit score: 8 T_ID 5 - Reflector chosen PN pattern: 28 94 2F 38 Step=3 | Mode=2 T_ID 0 - non-mode0 channel (0 bits): // - Range = // (decimal); hr1 = 0 (decimal) ********************************************************************** New DRBG octets: 32 73 A2 2D 88 47 DA 6A 1C 2C BD 8C E8 96 79 62 ********************************************************************** T_ID 0 - non-mode0 channel (8 bits): 32 - Range = 2 (decimal); hr1 = 0 (decimal) T_ID 0 - non-mode0 channel (8 bits): 73 - Range = 3 (decimal); hr1 = 1 (decimal) T_ID 0 - non-mode0 channel (8 bits): A2 - Range = 4 (decimal); hr1 = 2 (decimal) T_ID 0 - non-mode0 channel (8 bits): 2D - Range = 5 (decimal); hr1 = 0 (decimal) T_ID 0 - non-mode0 channel (8 bits): 88 - Range = 6 (decimal); hr1 = 3 (decimal) T_ID 0 - non-mode0 channel (8 bits): 47 - Range = 7 (decimal); hr1 = 1 (decimal) T_ID 0 - non-mode0 channel (8 bits): DA - Range = 8 (decimal); hr1 = 6 (decimal) T_ID 0 - non-mode0 channel (8 bits): 6A - Range = 9 (decimal); hr1 = 3 (decimal) T_ID 0 - non-mode0 channel (8 bits): 1C - Range = 10 (decimal); hr1 = 1 (decimal) T_ID 0 - non-mode0 channel (8 bits): 2C - Range = 11 (decimal); hr1 = 1 (decimal) T_ID 0 - non-mode0 channel (8 bits): BD - Range = 12 (decimal); hr1 = 8 (decimal) T_ID 0 - non-mode0 channel (8 bits): 8C - Range = 13 (decimal); hr1 = 7 (decimal) T_ID 0 - non-mode0 channel (8 bits): E8 - Range = 14 (decimal); hr1 = 12 (decimal) T_ID 0 - non-mode0 channel (8 bits): 96 - Range = 15 (decimal); hr1 = 8 (decimal) T_ID 0 - non-mode0 channel (8 bits): 79 - Range = 16 (decimal); hr1 = 7 (decimal) T_ID 0 - non-mode0 channel (8 bits): 62 - Range = 17 (decimal); hr1 = 6 (decimal) ********************************************************************** New DRBG octets: AB D1 0C 59 DD BD D9 F3 05 20 F7 D0 EF 37 8E BE ********************************************************************** T_ID 0 - non-mode0 channel (8 bits): AB - Range = 18 (decimal); hr1 = 12 (decimal) T_ID 0 - non-mode0 channel (8 bits): D1 - Range = 19 (decimal); hr1 = 15 (decimal) T_ID 0 - Shuffled channels: 6 12 5 10 3 2 18 17 16 8 11 7 19 4 13 20 9 15 14 ********************************************************************** New DRBG octets: F8 82 2A 54 E0 7C 50 15 57 CD 98 51 69 D4 AC AB ********************************************************************** T_ID 2 - Submode insertion (8 bits): F8 - Range = 5 (decimal); hr1 = 4 (decimal) ********************************************************************** New DRBG octets: 3B 8E 7E 2A A8 D7 CF F1 CC 69 BE 13 75 1F B3 95 ********************************************************************** T_ID 3 - TPM extension (2 bits): 00 ********************************************************************** New DRBG octets: B4 8D B4 8C 41 33 DE 1D 71 B7 46 A1 61 8C 4D D9 ********************************************************************** T_ID 4 - Antenna path perm. (8 bits): B4 - Range = 24 (decimal); hr1 = 16 (decimal) Step=4 | Mode=2 T_ID 3 - TPM extension (2 bits): C0 T_ID 4 - Antenna path perm. (8 bits): 8D - Range = 24 (decimal); hr1 = 13 (decimal) Step=5 | Mode=2 T_ID 3 - TPM extension (2 bits): 80 T_ID 4 - Antenna path perm. (8 bits): B4 - Range = 24 (decimal); hr1 = 16 (decimal) Step=6 | Mode=2 T_ID 3 - TPM extension (2 bits): C0 T_ID 4 - Antenna path perm. (8 bits): 8C - Range = 24 (decimal); hr1 = 13 (decimal) Step=7 | Mode=2 T_ID 3 - TPM extension (2 bits): 80 T_ID 4 - Antenna path perm. (8 bits): 41 - Range = 24 (decimal); hr1 = 6 (decimal) Step=8 | Mode=2 T_ID 3 - TPM extension (2 bits): 00 T_ID 4 - Antenna path perm. (8 bits): 33 - Range = 24 (decimal); hr1 = 4 (decimal) Step=9 | Mode=3 T_ID 3 - TPM extension (2 bits): C0 T_ID 4 - Antenna path perm. (8 bits): DE - Range = 24 (decimal); hr1 = 20 (decimal) ********************************************************************** New DRBG octets: A6 93 A0 3E 16 9E ED DC 3D 54 2C 1A 6B 2E B7 48 ********************************************************************** T_ID 5 - RTT AA candidates (128 bits): A6 93 A0 3E 16 9E ED DC 3D 54 2C 1A 6B 2E B7 48 T_ID 5 - Initiator first 32-bit score: 8 T_ID 5 - Initiator second 32-bit score: 6 T_ID 5 - Initiator chosen PN pattern: 16 9E ED DC T_ID 5 - Reflector first 32-bit score: 20 T_ID 5 - Reflector second 32-bit score: 14 T_ID 5 - Reflector chosen PN pattern: 6B 2E B7 48 ********************************************************************** New DRBG octets: 72 26 4D 65 1E 54 6E 3B A1 7E 46 61 A5 00 90 67 ********************************************************************** T_ID 6 - SS marker position initiator (8 bits): 72 - Range = 29 (decimal); hr1 = 12 (decimal) T_ID 6 - SS marker position reflector (8 bits): 26 - Range = 29 (decimal); hr1 = 4 (decimal) ********************************************************************** New DRBG octets: 7D CB DA 7B 6E 5E A2 0C 32 0D C2 4F 8E 2C 72 5D ********************************************************************** T_ID 7 - SS marker sig. sel. initiator (1 bits): 00 Initiator Sounding Sequence: 0101 0101 0101 1100 0101 0101 0101 0101 (Tx bit order, left to right) T_ID 7 - SS marker sig. sel. reflector (1 bits): 80 Reflector Sounding Sequence: 0101 0011 0101 0101 0101 0101 0101 0101 (Tx bit order, left to right) Step=10 | Mode=2 T_ID 2 - Submode insertion (8 bits): 82 - Range = 5 (decimal); hr1 = 2 (decimal) T_ID 3 - TPM extension (2 bits): 80 T_ID 4 - Antenna path perm. (8 bits): 1D - Range = 24 (decimal); hr1 = 2 (decimal) Step=11 | Mode=2 T_ID 3 - TPM extension (2 bits): 40 T_ID 4 - Antenna path perm. (8 bits): 71 - Range = 24 (decimal); hr1 = 10 (decimal) Step=12 | Mode=2 T_ID 3 - TPM extension (2 bits): C0 T_ID 4 - Antenna path perm. (8 bits): B7 - Range = 24 (decimal); hr1 = 17 (decimal) Step=13 | Mode=2 T_ID 3 - TPM extension (2 bits): C0 T_ID 4 - Antenna path perm. (8 bits): 46 - Range = 24 (decimal); hr1 = 6 (decimal) Step=14 | Mode=3 T_ID 3 - TPM extension (2 bits): 80 T_ID 4 - Antenna path perm. (8 bits): A1 - Range = 24 (decimal); hr1 = 15 (decimal) ********************************************************************** New DRBG octets: F7 21 97 86 9D 82 D2 EC 80 69 7C 5B 57 17 64 70 ********************************************************************** T_ID 5 - RTT AA candidates (128 bits): F7 21 97 86 9D 82 D2 EC 80 69 7C 5B 57 17 64 70 T_ID 5 - Initiator first 32-bit score: 10 T_ID 5 - Initiator second 32-bit score: 12 T_ID 5 - Initiator chosen PN pattern: F7 21 97 86 T_ID 5 - Reflector first 32-bit score: 14 T_ID 5 - Reflector second 32-bit score: 10 T_ID 5 - Reflector chosen PN pattern: 57 17 64 70 T_ID 6 - SS marker position initiator (8 bits): 4D - Range = 29 (decimal); hr1 = 8 (decimal) T_ID 6 - SS marker position reflector (8 bits): 65 - Range = 29 (decimal); hr1 = 11 (decimal) T_ID 7 - SS marker sig. sel. initiator (1 bits): 80 T_ID 7 - SS marker sig. sel. reflector (1 bits): 80 Step=15 | Mode=2 T_ID 2 - Submode insertion (8 bits): 2A - Range = 5 (decimal); hr1 = 0 (decimal) T_ID 3 - TPM extension (2 bits): 00 T_ID 4 - Antenna path perm. (8 bits): 61 - Range = 24 (decimal); hr1 = 9 (decimal) Step=16 | Mode=2 T_ID 3 - TPM extension (2 bits): 80 T_ID 4 - Antenna path perm. (8 bits): 8C - Range = 24 (decimal); hr1 = 13 (decimal) Step=17 | Mode=3 T_ID 3 - TPM extension (2 bits): 80 T_ID 4 - Antenna path perm. (8 bits): 4D - Range = 24 (decimal); hr1 = 7 (decimal) ********************************************************************** New DRBG octets: 17 46 62 CD 92 22 DB 8B 0C 22 D1 19 C8 C5 97 E5 ********************************************************************** T_ID 5 - RTT AA candidates (128 bits): 17 46 62 CD 92 22 DB 8B 0C 22 D1 19 C8 C5 97 E5 T_ID 5 - Initiator first 32-bit score: 14 T_ID 5 - Initiator second 32-bit score: 16 T_ID 5 - Initiator chosen PN pattern: 17 46 62 CD T_ID 5 - Reflector first 32-bit score: 6 T_ID 5 - Reflector second 32-bit score: 6 T_ID 5 - Reflector chosen PN pattern: C8 C5 97 E5 T_ID 6 - SS marker position initiator (8 bits): 1E - Range = 29 (decimal); hr1 = 3 (decimal) T_ID 6 - SS marker position reflector (8 bits): 54 - Range = 29 (decimal); hr1 = 9 (decimal) T_ID 7 - SS marker sig. sel. initiator (1 bits): 80 T_ID 7 - SS marker sig. sel. reflector (1 bits): 80 Step=18 | Mode=2 T_ID 2 - Submode insertion (8 bits): 54 - Range = 5 (decimal); hr1 = 1 (decimal) T_ID 3 - TPM extension (2 bits): 80 T_ID 4 - Antenna path perm. (8 bits): D9 - Range = 24 (decimal); hr1 = 20 (decimal) Step=19 | Mode=2 T_ID 3 - TPM extension (2 bits): 80 ********************************************************************** New DRBG octets: CE 5A DE D7 79 BC 1F DB E5 AE A3 FC 92 0B 05 31 ********************************************************************** T_ID 4 - Antenna path perm. (8 bits): CE - Range = 24 (decimal); hr1 = 19 (decimal) Step=20 | Mode=0 ********************************************************************** New DRBG octets: 33 3E 3C 9D 31 E0 44 B6 7B 3F 20 38 AF D6 73 AC ********************************************************************** T_ID 5 - RTT AA candidates (128 bits): 33 3E 3C 9D 31 E0 44 B6 7B 3F 20 38 AF D6 73 AC T_ID 5 - Initiator first 32-bit score: 22 T_ID 5 - Initiator second 32-bit score: 10 T_ID 5 - Initiator chosen PN pattern: 31 E0 44 B6 T_ID 5 - Reflector first 32-bit score: 12 T_ID 5 - Reflector second 32-bit score: 8 T_ID 5 - Reflector chosen PN pattern: AF D6 73 AC Step=21 | Mode=0 ********************************************************************** New DRBG octets: AF 9F 78 48 26 29 96 A3 85 E6 60 4F 82 3B 87 C2 ********************************************************************** T_ID 5 - RTT AA candidates (128 bits): AF 9F 78 48 26 29 96 A3 85 E6 60 4F 82 3B 87 C2 T_ID 5 - Initiator first 32-bit score: 10 T_ID 5 - Initiator second 32-bit score: 14 T_ID 5 - Initiator chosen PN pattern: AF 9F 78 48 T_ID 5 - Reflector first 32-bit score: 12 T_ID 5 - Reflector second 32-bit score: 18 T_ID 5 - Reflector chosen PN pattern: 85 E6 60 4F Step=22 | Mode=0 ********************************************************************** New DRBG octets: 3C 60 3B D2 E1 A3 41 67 B3 78 97 ED B4 B2 72 BF ********************************************************************** T_ID 5 - RTT AA candidates (128 bits): 3C 60 3B D2 E1 A3 41 67 B3 78 97 ED B4 B2 72 BF T_ID 5 - Initiator first 32-bit score: 10 T_ID 5 - Initiator second 32-bit score: 8 T_ID 5 - Initiator chosen PN pattern: E1 A3 41 67 T_ID 5 - Reflector first 32-bit score: 12 T_ID 5 - Reflector second 32-bit score: 12 T_ID 5 - Reflector chosen PN pattern: B4 B2 72 BF Step=23 | Mode=2 T_ID 3 - TPM extension (2 bits): 80 T_ID 4 - Antenna path perm. (8 bits): 5A - Range = 24 (decimal); hr1 = 8 (decimal) Step=24 | Mode=3 T_ID 3 - TPM extension (2 bits): 80 T_ID 4 - Antenna path perm. (8 bits): DE - Range = 24 (decimal); hr1 = 20 (decimal) ********************************************************************** New DRBG octets: A9 83 4E D5 F0 71 EC A6 35 17 86 10 A6 EE AA 04 ********************************************************************** T_ID 5 - RTT AA candidates (128 bits): A9 83 4E D5 F0 71 EC A6 35 17 86 10 A6 EE AA 04 T_ID 5 - Initiator first 32-bit score: 14 T_ID 5 - Initiator second 32-bit score: 14 T_ID 5 - Initiator chosen PN pattern: F0 71 EC A6 T_ID 5 - Reflector first 32-bit score: 10 T_ID 5 - Reflector second 32-bit score: 16 T_ID 5 - Reflector chosen PN pattern: 35 17 86 10 T_ID 6 - SS marker position initiator (8 bits): 6E - Range = 29 (decimal); hr1 = 12 (decimal) T_ID 6 - SS marker position reflector (8 bits): 3B - Range = 29 (decimal); hr1 = 6 (decimal) T_ID 7 - SS marker sig. sel. initiator (1 bits): 00 T_ID 7 - SS marker sig. sel. reflector (1 bits): 80 Step=25 | Mode=2 T_ID 0 - non-mode0 channel (0 bits): // - Range = // (decimal); hr1 = 0 (decimal) T_ID 0 - non-mode0 channel (8 bits): 0C - Range = 2 (decimal); hr1 = 0 (decimal) T_ID 0 - non-mode0 channel (8 bits): 59 - Range = 3 (decimal); hr1 = 1 (decimal) T_ID 0 - non-mode0 channel (8 bits): DD - Range = 4 (decimal); hr1 = 3 (decimal) T_ID 0 - non-mode0 channel (8 bits): BD - Range = 5 (decimal); hr1 = 3 (decimal) T_ID 0 - non-mode0 channel (8 bits): D9 - Range = 6 (decimal); hr1 = 5 (decimal) T_ID 0 - non-mode0 channel (8 bits): F3 - Range = 7 (decimal); hr1 = 6 (decimal) T_ID 0 - non-mode0 channel (8 bits): 05 - Range = 8 (decimal); hr1 = 0 (decimal) T_ID 0 - non-mode0 channel (8 bits): 20 - Range = 9 (decimal); hr1 = 1 (decimal) T_ID 0 - non-mode0 channel (8 bits): F7 - Range = 10 (decimal); hr1 = 9 (decimal) T_ID 0 - non-mode0 channel (8 bits): D0 - Range = 11 (decimal); hr1 = 8 (decimal) T_ID 0 - non-mode0 channel (8 bits): EF - Range = 12 (decimal); hr1 = 11 (decimal) T_ID 0 - non-mode0 channel (8 bits): 37 - Range = 13 (decimal); hr1 = 2 (decimal) T_ID 0 - non-mode0 channel (8 bits): 8E - Range = 14 (decimal); hr1 = 7 (decimal) T_ID 0 - non-mode0 channel (8 bits): BE - Range = 15 (decimal); hr1 = 11 (decimal) ********************************************************************** New DRBG octets: 73 F3 11 6C E1 09 5A 29 BF 4D E7 AD D7 CC 2C D4 ********************************************************************** T_ID 0 - non-mode0 channel (8 bits): 73 - Range = 16 (decimal); hr1 = 7 (decimal) T_ID 0 - non-mode0 channel (8 bits): F3 - Range = 17 (decimal); hr1 = 16 (decimal) T_ID 0 - non-mode0 channel (8 bits): 11 - Range = 18 (decimal); hr1 = 1 (decimal) T_ID 0 - non-mode0 channel (16 bits): 6C E1 - Range = 19 (decimal); hr1 = 16 (decimal) T_ID 0 - Shuffled channels: 9 19 14 6 5 7 8 17 12 11 4 16 2 3 13 15 20 10 18 T_ID 2 - Submode insertion (8 bits): E0 - Range = 5 (decimal); hr1 = 4 (decimal) T_ID 3 - TPM extension (2 bits): 00 T_ID 4 - Antenna path perm. (8 bits): D7 - Range = 24 (decimal); hr1 = 20 (decimal) Step=26 | Mode=2 T_ID 3 - TPM extension (2 bits): C0 T_ID 4 - Antenna path perm. (8 bits): 79 - Range = 24 (decimal); hr1 = 11 (decimal) Step=27 | Mode=2 T_ID 3 - TPM extension (2 bits): 40 T_ID 4 - Antenna path perm. (8 bits): BC - Range = 24 (decimal); hr1 = 17 (decimal) Step=28 | Mode=2 T_ID 3 - TPM extension (2 bits): 40 T_ID 4 - Antenna path perm. (8 bits): 1F - Range = 24 (decimal); hr1 = 2 (decimal) Step=29 | Mode=2 T_ID 3 - TPM extension (2 bits): C0 T_ID 4 - Antenna path perm. (8 bits): DB - Range = 24 (decimal); hr1 = 20 (decimal) Step=30 | Mode=2 T_ID 3 - TPM extension (2 bits): C0 T_ID 4 - Antenna path perm. (8 bits): E5 - Range = 24 (decimal); hr1 = 21 (decimal) Step=31 | Mode=3 T_ID 3 - TPM extension (2 bits): 00 T_ID 4 - Antenna path perm. (8 bits): AE - Range = 24 (decimal); hr1 = 16 (decimal) ********************************************************************** New DRBG octets: C0 F4 37 CB 2E D8 01 47 35 AF 5E 5D 02 0B 67 A1 ********************************************************************** T_ID 5 - RTT AA candidates (128 bits): C0 F4 37 CB 2E D8 01 47 35 AF 5E 5D 02 0B 67 A1 T_ID 5 - Initiator first 32-bit score: 10 T_ID 5 - Initiator second 32-bit score: 16 T_ID 5 - Initiator chosen PN pattern: C0 F4 37 CB T_ID 5 - Reflector first 32-bit score: 12 T_ID 5 - Reflector second 32-bit score: 16 T_ID 5 - Reflector chosen PN pattern: 35 AF 5E 5D T_ID 6 - SS marker position initiator (8 bits): A1 - Range = 29 (decimal); hr1 = 18 (decimal) T_ID 6 - SS marker position reflector (8 bits): 7E - Range = 29 (decimal); hr1 = 14 (decimal) T_ID 7 - SS marker sig. sel. initiator (1 bits): 80 T_ID 7 - SS marker sig. sel. reflector (1 bits): 80 Step=32 | Mode=2 T_ID 2 - Submode insertion (8 bits): 7C - Range = 5 (decimal); hr1 = 2 (decimal) T_ID 3 - TPM extension (2 bits): C0 T_ID 4 - Antenna path perm. (8 bits): A3 - Range = 24 (decimal); hr1 = 15 (decimal) Step=33 | Mode=2 T_ID 3 - TPM extension (2 bits): C0 T_ID 4 - Antenna path perm. (8 bits): FC - Range = 24 (decimal); hr1 = 23 (decimal) Step=34 | Mode=2 T_ID 3 - TPM extension (2 bits): C0 T_ID 4 - Antenna path perm. (8 bits): 92 - Range = 24 (decimal); hr1 = 13 (decimal) Step=35 | Mode=2 T_ID 3 - TPM extension (2 bits): C0 T_ID 4 - Antenna path perm. (16 bits): 0B 05 - Range = 24 (decimal); hr1 = 0 (decimal) Step=36 | Mode=3 T_ID 3 - TPM extension (2 bits): 00 T_ID 4 - Antenna path perm. (8 bits): 31 - Range = 24 (decimal); hr1 = 4 (decimal) ********************************************************************** New DRBG octets: 2A 43 AB EB C6 D6 F2 E2 93 41 84 17 32 E6 82 31 ********************************************************************** T_ID 5 - RTT AA candidates (128 bits): 2A 43 AB EB C6 D6 F2 E2 93 41 84 17 32 E6 82 31 T_ID 5 - Initiator first 32-bit score: 22 T_ID 5 - Initiator second 32-bit score: 8 T_ID 5 - Initiator chosen PN pattern: C6 D6 F2 E2 T_ID 5 - Reflector first 32-bit score: 8 T_ID 5 - Reflector second 32-bit score: 12 T_ID 5 - Reflector chosen PN pattern: 93 41 84 17 T_ID 6 - SS marker position initiator (8 bits): 46 - Range = 29 (decimal); hr1 = 7 (decimal) T_ID 6 - SS marker position reflector (8 bits): 61 - Range = 29 (decimal); hr1 = 10 (decimal) T_ID 7 - SS marker sig. sel. initiator (1 bits): 00 T_ID 7 - SS marker sig. sel. reflector (1 bits): 00 Step=37 | Mode=2 T_ID 2 - Submode insertion (8 bits): 50 - Range = 5 (decimal); hr1 = 1 (decimal) T_ID 3 - TPM extension (2 bits): 40 ********************************************************************** New DRBG octets: 02 4C 7D 7E 4F 6A 09 9E C1 E0 6D F8 06 91 16 9B ********************************************************************** T_ID 4 - Antenna path perm. (8 bits): 02 - Range = 24 (decimal); hr1 = 0 (decimal) Step=38 | Mode=2 T_ID 3 - TPM extension (2 bits): C0 T_ID 4 - Antenna path perm. (8 bits): 4C - Range = 24 (decimal); hr1 = 7 (decimal) Step=39 | Mode=2 T_ID 3 - TPM extension (2 bits): 00 T_ID 4 - Antenna path perm. (8 bits): 7D - Range = 24 (decimal); hr1 = 11 (decimal) Step=40 | Mode=3 T_ID 3 - TPM extension (2 bits): C0 T_ID 4 - Antenna path perm. (8 bits): 7E - Range = 24 (decimal); hr1 = 11 (decimal) ********************************************************************** New DRBG octets: 78 4C A9 80 0A 58 C3 56 12 75 95 0B 6F 84 0E C6 ********************************************************************** T_ID 5 - RTT AA candidates (128 bits): 78 4C A9 80 0A 58 C3 56 12 75 95 0B 6F 84 0E C6 T_ID 5 - Initiator first 32-bit score: 4 T_ID 5 - Initiator second 32-bit score: 8 T_ID 5 - Initiator chosen PN pattern: 78 4C A9 80 T_ID 5 - Reflector first 32-bit score: 10 T_ID 5 - Reflector second 32-bit score: 10 T_ID 5 - Reflector chosen PN pattern: 6F 84 0E C6 T_ID 6 - SS marker position initiator (8 bits): A5 - Range = 29 (decimal); hr1 = 18 (decimal) T_ID 6 - SS marker position reflector (16 bits): 00 90 - Range = 29 (decimal); hr1 = 16 (decimal) T_ID 7 - SS marker sig. sel. initiator (1 bits): 80 T_ID 7 - SS marker sig. sel. reflector (1 bits): 00 Step=41 | Mode=2 T_ID 2 - Submode insertion (8 bits): 15 - Range = 5 (decimal); hr1 = 0 (decimal) T_ID 3 - TPM extension (2 bits): 00 T_ID 4 - Antenna path perm. (8 bits): 4F - Range = 24 (decimal); hr1 = 7 (decimal) Step=42 | Mode=2 T_ID 3 - TPM extension (2 bits): 40 T_ID 4 - Antenna path perm. (8 bits): 6A - Range = 24 (decimal); hr1 = 9 (decimal) Step=43 | Mode=3 T_ID 3 - TPM extension (2 bits): 80 T_ID 4 - Antenna path perm. (8 bits): 09 - Range = 24 (decimal); hr1 = 0 (decimal) ********************************************************************** New DRBG octets: 51 17 E6 D9 19 D2 9F 36 65 42 19 F8 BC 7E 01 7A ********************************************************************** T_ID 5 - RTT AA candidates (128 bits): 51 17 E6 D9 19 D2 9F 36 65 42 19 F8 BC 7E 01 7A T_ID 5 - Initiator first 32-bit score: 10 T_ID 5 - Initiator second 32-bit score: 10 T_ID 5 - Initiator chosen PN pattern: 19 D2 9F 36 T_ID 5 - Reflector first 32-bit score: 6 T_ID 5 - Reflector second 32-bit score: 20 T_ID 5 - Reflector chosen PN pattern: 65 42 19 F8 T_ID 6 - SS marker position initiator (8 bits): 67 - Range = 29 (decimal); hr1 = 11 (decimal) ********************************************************************** New DRBG octets: D1 93 AD A2 CE F3 2C 5F F0 29 1E 13 DB F5 9D 1D ********************************************************************** T_ID 6 - SS marker position reflector (8 bits): D1 - Range = 29 (decimal); hr1 = 23 (decimal) T_ID 7 - SS marker sig. sel. initiator (1 bits): 80 T_ID 7 - SS marker sig. sel. reflector (1 bits): 80

8.1.2. Set 2

From the CS Configuration procedure:

ChM = 0x1F FF FF FF FF FF FC 7F FF FC
ChM_Repetition = 1
Main_Mode = 0x02
Sub_Mode = 0x01
Main_Mode_Min_Steps = 2
Main_Mode_Max_Steps = 6
Main_Mode_Repetition = 1
Mode_0_Steps = 3
RTT_Type = 0x01
Role = 0b01
ChSel = 0

From the CS Start procedure:

Subevent_Len – setup to include at least 20 steps
Procedure_Count = 1
ACI = 7

******************************** INSTANTIATION FUNCTION ********************************* h9() instantiation ***************************************************************************************** Entropy input Peripheral (CS_IV_P): E1 0B C2 8A 0B FD DF E9 Entropy input Central (CS_IV_C): 3E 7F 51 86 E0 CA 0B 3B Entropy input (CS_IV): E1 0B C2 8A 0B FD DF E9 3E 7F 51 86 E0 CA 0B 3B Nonce Peripheral (CS_IN_P): 9F F4 77 C1 Nonce Central (CS_IN_C): 86 73 84 0D Nonce (CS_IN): 9F F4 77 C1 86 73 84 0D Personalization string Peripheral (CS_PV_P): C9 80 DE DF 98 82 ED 44 Personalization string Central (CS_PV_C): 64 A6 74 96 78 68 F1 43 Personalization string (CS_PV): C9 80 DE DF 98 82 ED 44 64 A6 74 96 78 68 F1 43 *********************** f8 function start ********************** **************************** f7 function start *************************** f7 K input: 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F f7 V||S input: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 28 00 00 00 20 E1 0B C2 8A 0B FD DF E9 3E 7F 51 86 E0 CA 0B 3B 9F F4 77 C1 86 73 84 0D C9 80 DE DF 98 82 ED 44 64 A6 74 96 78 68 F1 43 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f7 K2 output: 8B 2B 06 DC 52 2D 3E 0A F0 A5 0C AF 48 10 E0 35 **************************** f7 function end ***************************** **************************** f7 function start *************************** f7 K input: 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F f7 V||S input: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 28 00 00 00 20 E1 0B C2 8A 0B FD DF E9 3E 7F 51 86 E0 CA 0B 3B 9F F4 77 C1 86 73 84 0D C9 80 DE DF 98 82 ED 44 64 A6 74 96 78 68 F1 43 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f7 X output: A3 4F BE 57 F8 F9 7E 34 9D 15 A3 76 79 60 74 64 **************************** f7 function end ***************************** f8 SM output: B6 02 B1 B2 8C 6F 0A 3D DA E6 37 B4 84 25 08 7D DC 18 8C 89 A1 B0 CD FD A1 E8 FC 66 C9 99 97 50 ************************ f8 function end *********************** ************************************ INITIAL K and V ************************************ K: EE E0 4D 7C 76 11 3A 5C EC 99 2A E3 20 C2 4D 27 V: DF 90 56 47 C1 06 6E 6F 52 C0 3E DF B8 2B 69 28 ***************************************************************************************** ******************************* CHANNEL SOUNDING SEQUENCE ******************************* *************************************** Channel Map ************************************* Bit-map: 1F FF FF FF FF FF FC 7F FF FC Filtered channels: 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 ************************************** CS Procedure: 0 ********************************** *** INITIAL K and V *** K: EE E0 4D 7C 76 11 3A 5C EC 99 2A E3 20 C2 4D 27 V: DF 90 56 47 C1 06 6E 6F 52 C0 3E DF B8 2B 69 28 Step=0 | Mode=0 ********************************************************************** New DRBG octets: FF BC C1 CA 39 A6 9D C4 07 38 EF 33 D9 D1 35 32 ********************************************************************** T_ID 1 - mode0 channel (8bits): FF - Range = 2 (decimal); hr1 = 1 (decimal) T_ID 1 - mode0 channel (8bits): BC - Range = 3 (decimal); hr1 = 2 (decimal) T_ID 1 - mode0 channel (8bits): C1 - Range = 4 (decimal); hr1 = 3 (decimal) T_ID 1 - mode0 channel (8bits): CA - Range = 5 (decimal); hr1 = 3 (decimal) T_ID 1 - mode0 channel (8bits): 39 - Range = 6 (decimal); hr1 = 1 (decimal) T_ID 1 - mode0 channel (8bits): A6 - Range = 7 (decimal); hr1 = 4 (decimal) T_ID 1 - mode0 channel (8bits): 9D - Range = 8 (decimal); hr1 = 4 (decimal) T_ID 1 - mode0 channel (8bits): C4 - Range = 9 (decimal); hr1 = 6 (decimal) T_ID 1 - mode0 channel (8bits): 07 - Range = 10 (decimal); hr1 = 0 (decimal) T_ID 1 - mode0 channel (8bits): 38 - Range = 11 (decimal); hr1 = 2 (decimal) T_ID 1 - mode0 channel (8bits): EF - Range = 12 (decimal); hr1 = 11 (decimal) T_ID 1 - mode0 channel (8bits): 33 - Range = 13 (decimal); hr1 = 2 (decimal) T_ID 1 - mode0 channel (8bits): D9 - Range = 14 (decimal); hr1 = 11 (decimal) T_ID 1 - mode0 channel (8bits): D1 - Range = 15 (decimal); hr1 = 12 (decimal) T_ID 1 - mode0 channel (8bits): 35 - Range = 16 (decimal); hr1 = 3 (decimal) T_ID 1 - mode0 channel (8bits): 32 - Range = 17 (decimal); hr1 = 3 (decimal) ********************************************************************** New DRBG octets: 51 EE 4B B0 3E E6 D0 A1 71 87 1C 2E 60 46 8F 6C ********************************************************************** T_ID 1 - mode0 channel (8bits): 51 - Range = 18 (decimal); hr1 = 5 (decimal) T_ID 1 - mode0 channel (8bits): EE - Range = 19 (decimal); hr1 = 17 (decimal) T_ID 1 - mode0 channel (8bits): 4B - Range = 20 (decimal); hr1 = 5 (decimal) T_ID 1 - mode0 channel (8bits): B0 - Range = 21 (decimal); hr1 = 14 (decimal) T_ID 1 - mode0 channel (8bits): 3E - Range = 22 (decimal); hr1 = 5 (decimal) T_ID 1 - mode0 channel (8bits): E6 - Range = 23 (decimal); hr1 = 20 (decimal) T_ID 1 - mode0 channel (8bits): D0 - Range = 24 (decimal); hr1 = 19 (decimal) T_ID 1 - mode0 channel (8bits): A1 - Range = 25 (decimal); hr1 = 15 (decimal) T_ID 1 - mode0 channel (8bits): 71 - Range = 26 (decimal); hr1 = 11 (decimal) T_ID 1 - mode0 channel (8bits): 87 - Range = 27 (decimal); hr1 = 14 (decimal) T_ID 1 - mode0 channel (8bits): 1C - Range = 28 (decimal); hr1 = 3 (decimal) T_ID 1 - mode0 channel (8bits): 2E - Range = 29 (decimal); hr1 = 5 (decimal) T_ID 1 - mode0 channel (8bits): 60 - Range = 30 (decimal); hr1 = 11 (decimal) T_ID 1 - mode0 channel (8bits): 46 - Range = 31 (decimal); hr1 = 8 (decimal) T_ID 1 - mode0 channel (8bits): 8F - Range = 32 (decimal); hr1 = 17 (decimal) T_ID 1 - mode0 channel (8bits): 6C - Range = 33 (decimal); hr1 = 13 (decimal) ********************************************************************** New DRBG octets: 7D 75 2F 17 23 57 34 22 EF C7 CB C2 1F 18 90 8F ********************************************************************** T_ID 1 - mode0 channel (8bits): 7D - Range = 34 (decimal); hr1 = 16 (decimal) T_ID 1 - mode0 channel (8bits): 75 - Range = 35 (decimal); hr1 = 15 (decimal) T_ID 1 - mode0 channel (8bits): 2F - Range = 36 (decimal); hr1 = 6 (decimal) T_ID 1 - mode0 channel (8bits): 17 - Range = 37 (decimal); hr1 = 3 (decimal) T_ID 1 - mode0 channel (8bits): 23 - Range = 38 (decimal); hr1 = 5 (decimal) T_ID 1 - mode0 channel (8bits): 57 - Range = 39 (decimal); hr1 = 13 (decimal) T_ID 1 - mode0 channel (8bits): 34 - Range = 40 (decimal); hr1 = 8 (decimal) T_ID 1 - mode0 channel (8bits): 22 - Range = 41 (decimal); hr1 = 5 (decimal) T_ID 1 - mode0 channel (8bits): EF - Range = 42 (decimal); hr1 = 39 (decimal) T_ID 1 - mode0 channel (8bits): C7 - Range = 43 (decimal); hr1 = 33 (decimal) T_ID 1 - mode0 channel (8bits): CB - Range = 44 (decimal); hr1 = 34 (decimal) T_ID 1 - mode0 channel (16bits): C2 1F - Range = 45 (decimal); hr1 = 5 (decimal) T_ID 1 - mode0 channel (8bits): 18 - Range = 46 (decimal); hr1 = 4 (decimal) T_ID 1 - mode0 channel (8bits): 90 - Range = 47 (decimal); hr1 = 26 (decimal) T_ID 1 - mode0 channel (8bits): 8F - Range = 48 (decimal); hr1 = 26 (decimal) ********************************************************************** New DRBG octets: 64 74 2B E9 80 0D 87 22 36 1E 6F 55 61 A8 7C 17 ********************************************************************** T_ID 1 - mode0 channel (8bits): 64 - Range = 49 (decimal); hr1 = 19 (decimal) T_ID 1 - mode0 channel (8bits): 74 - Range = 50 (decimal); hr1 = 22 (decimal) T_ID 1 - mode0 channel (8bits): 2B - Range = 51 (decimal); hr1 = 8 (decimal) T_ID 1 - mode0 channel (8bits): E9 - Range = 52 (decimal); hr1 = 47 (decimal) T_ID 1 - mode0 channel (8bits): 80 - Range = 53 (decimal); hr1 = 26 (decimal) T_ID 1 - mode0 channel (8bits): 0D - Range = 54 (decimal); hr1 = 2 (decimal) T_ID 1 - mode0 channel (16bits): 87 22 - Range = 55 (decimal); hr1 = 7 (decimal) T_ID 1 - mode0 channel (8bits): 36 - Range = 56 (decimal); hr1 = 11 (decimal) T_ID 1 - mode0 channel (8bits): 1E - Range = 57 (decimal); hr1 = 6 (decimal) T_ID 1 - mode0 channel (8bits): 6F - Range = 58 (decimal); hr1 = 25 (decimal) T_ID 1 - mode0 channel (8bits): 55 - Range = 59 (decimal); hr1 = 19 (decimal) T_ID 1 - mode0 channel (8bits): 61 - Range = 60 (decimal); hr1 = 22 (decimal) T_ID 1 - mode0 channel (16bits): A8 7C - Range = 61 (decimal); hr1 = 29 (decimal) T_ID 1 - mode0 channel (8bits): 17 - Range = 62 (decimal); hr1 = 5 (decimal) ********************************************************************** New DRBG octets: 0F 2F 55 C1 9B BD 7C 71 EC 79 0A 97 FD 0D 93 69 ********************************************************************** T_ID 1 - mode0 channel (8bits): 0F - Range = 63 (decimal); hr1 = 3 (decimal) T_ID 1 - mode0 channel (8bits): 2F - Range = 64 (decimal); hr1 = 11 (decimal) T_ID 1 - mode0 channel (8bits): 55 - Range = 65 (decimal); hr1 = 21 (decimal) T_ID 1 - mode0 channel (8bits): C1 - Range = 66 (decimal); hr1 = 49 (decimal) T_ID 1 - mode0 channel (8bits): 9B - Range = 67 (decimal); hr1 = 40 (decimal) T_ID 1 - mode0 channel (8bits): BD - Range = 68 (decimal); hr1 = 50 (decimal) T_ID 1 - mode0 channel (8bits): 7C - Range = 69 (decimal); hr1 = 33 (decimal) T_ID 1 - mode0 channel (8bits): 71 - Range = 70 (decimal); hr1 = 30 (decimal) T_ID 1 - mode0 channel (8bits): EC - Range = 71 (decimal); hr1 = 65 (decimal) T_ID 1 - mode0 channel (16bits): 79 0A - Range = 72 (decimal); hr1 = 2 (decimal) T_ID 1 - Shuffled channels: 11 7 76 67 50 66 61 59 55 2 4 68 16 43 31 39 38 36 3 63 27 69 64 19 6 62 57 18 26 65 74 20 13 73 48 10 32 33 37 46 71 35 17 29 45 9 22 56 28 70 72 51 52 14 8 34 40 15 53 54 30 49 41 60 21 75 42 44 47 5 12 58 ********************************************************************** New DRBG octets: 0C 00 E4 AA 6C 37 6A B8 00 B8 C5 5D F0 79 BC 3A ********************************************************************** T_ID 5 - RTT AA candidates (128 bits): 0C 00 E4 AA 6C 37 6A B8 00 B8 C5 5D F0 79 BC 3A T_ID 5 - Initiator first 32-bit score: 12 T_ID 5 - Initiator second 32-bit score: 8 T_ID 5 - Initiator chosen PN pattern: 6C 37 6A B8 T_ID 5 - Reflector first 32-bit score: 16 T_ID 5 - Reflector second 32-bit score: 16 T_ID 5 - Reflector chosen PN pattern: F0 79 BC 3A Step=1 | Mode=0 ********************************************************************** New DRBG octets: 01 1C AE 4E 99 47 D1 B5 D0 6A CD DA C7 F8 F9 37 ********************************************************************** T_ID 5 - RTT AA candidates (128 bits): 01 1C AE 4E 99 47 D1 B5 D0 6A CD DA C7 F8 F9 37 T_ID 5 - Initiator first 32-bit score: 6 T_ID 5 - Initiator second 32-bit score: 8 T_ID 5 - Initiator chosen PN pattern: 01 1C AE 4E T_ID 5 - Reflector first 32-bit score: 10 T_ID 5 - Reflector second 32-bit score: 14 T_ID 5 - Reflector chosen PN pattern: D0 6A CD DA Step=2 | Mode=0 ********************************************************************** New DRBG octets: 64 06 12 14 86 05 AF EA 71 55 0B DD 28 94 2F 38 ********************************************************************** T_ID 5 - RTT AA candidates (128 bits): 64 06 12 14 86 05 AF EA 71 55 0B DD 28 94 2F 38 T_ID 5 - Initiator first 32-bit score: 10 T_ID 5 - Initiator second 32-bit score: 12 T_ID 5 - Initiator chosen PN pattern: 64 06 12 14 T_ID 5 - Reflector first 32-bit score: 28 T_ID 5 - Reflector second 32-bit score: 8 T_ID 5 - Reflector chosen PN pattern: 28 94 2F 38 Step=3 | Mode=2 ********************************************************************** New DRBG octets: 32 73 A2 2D 88 47 DA 6A 1C 2C BD 8C E8 96 79 62 ********************************************************************** T_ID 0 - non-mode0 channel (8bits): 32 - Range = 2 (decimal); hr1 = 0 (decimal) T_ID 0 - non-mode0 channel (8bits): 73 - Range = 3 (decimal); hr1 = 1 (decimal) T_ID 0 - non-mode0 channel (8bits): A2 - Range = 4 (decimal); hr1 = 2 (decimal) T_ID 0 - non-mode0 channel (8bits): 2D - Range = 5 (decimal); hr1 = 0 (decimal) T_ID 0 - non-mode0 channel (8bits): 88 - Range = 6 (decimal); hr1 = 3 (decimal) T_ID 0 - non-mode0 channel (8bits): 47 - Range = 7 (decimal); hr1 = 1 (decimal) T_ID 0 - non-mode0 channel (8bits): DA - Range = 8 (decimal); hr1 = 6 (decimal) T_ID 0 - non-mode0 channel (8bits): 6A - Range = 9 (decimal); hr1 = 3 (decimal) T_ID 0 - non-mode0 channel (8bits): 1C - Range = 10 (decimal); hr1 = 1 (decimal) T_ID 0 - non-mode0 channel (8bits): 2C - Range = 11 (decimal); hr1 = 1 (decimal) T_ID 0 - non-mode0 channel (8bits): BD - Range = 12 (decimal); hr1 = 8 (decimal) T_ID 0 - non-mode0 channel (8bits): 8C - Range = 13 (decimal); hr1 = 7 (decimal) T_ID 0 - non-mode0 channel (8bits): E8 - Range = 14 (decimal); hr1 = 12 (decimal) T_ID 0 - non-mode0 channel (8bits): 96 - Range = 15 (decimal); hr1 = 8 (decimal) T_ID 0 - non-mode0 channel (8bits): 79 - Range = 16 (decimal); hr1 = 7 (decimal) T_ID 0 - non-mode0 channel (8bits): 62 - Range = 17 (decimal); hr1 = 6 (decimal) ********************************************************************** New DRBG octets: AB D1 0C 59 DD BD D9 F3 05 20 F7 D0 EF 37 8E BE ********************************************************************** T_ID 0 - non-mode0 channel (8bits): AB - Range = 18 (decimal); hr1 = 12 (decimal) T_ID 0 - non-mode0 channel (8bits): D1 - Range = 19 (decimal); hr1 = 15 (decimal) T_ID 0 - non-mode0 channel (8bits): 0C - Range = 20 (decimal); hr1 = 0 (decimal) T_ID 0 - non-mode0 channel (8bits): 59 - Range = 21 (decimal); hr1 = 7 (decimal) T_ID 0 - non-mode0 channel (8bits): DD - Range = 22 (decimal); hr1 = 18 (decimal) T_ID 0 - non-mode0 channel (8bits): BD - Range = 23 (decimal); hr1 = 16 (decimal) T_ID 0 - non-mode0 channel (8bits): D9 - Range = 24 (decimal); hr1 = 20 (decimal) T_ID 0 - non-mode0 channel (8bits): F3 - Range = 25 (decimal); hr1 = 23 (decimal) T_ID 0 - non-mode0 channel (8bits): 05 - Range = 26 (decimal); hr1 = 0 (decimal) T_ID 0 - non-mode0 channel (8bits): 20 - Range = 27 (decimal); hr1 = 3 (decimal) T_ID 0 - non-mode0 channel (8bits): F7 - Range = 28 (decimal); hr1 = 27 (decimal) T_ID 0 - non-mode0 channel (8bits): D0 - Range = 29 (decimal); hr1 = 23 (decimal) T_ID 0 - non-mode0 channel (16bits): EF 37 - Range = 30 (decimal); hr1 = 6 (decimal) T_ID 0 - non-mode0 channel (8bits): 8E - Range = 31 (decimal); hr1 = 17 (decimal) T_ID 0 - non-mode0 channel (8bits): BE - Range = 32 (decimal); hr1 = 23 (decimal) ********************************************************************** New DRBG octets: 3D FD C0 DF 3B F7 A9 A1 91 71 B5 33 C8 83 37 C5 ********************************************************************** T_ID 0 - non-mode0 channel (8bits): 3D - Range = 33 (decimal); hr1 = 7 (decimal) T_ID 0 - non-mode0 channel (8bits): FD - Range = 34 (decimal); hr1 = 33 (decimal) T_ID 0 - non-mode0 channel (8bits): C0 - Range = 35 (decimal); hr1 = 26 (decimal) T_ID 0 - non-mode0 channel (8bits): DF - Range = 36 (decimal); hr1 = 31 (decimal) T_ID 0 - non-mode0 channel (8bits): 3B - Range = 37 (decimal); hr1 = 8 (decimal) T_ID 0 - non-mode0 channel (8bits): F7 - Range = 38 (decimal); hr1 = 36 (decimal) T_ID 0 - non-mode0 channel (8bits): A9 - Range = 39 (decimal); hr1 = 25 (decimal) T_ID 0 - non-mode0 channel (8bits): A1 - Range = 40 (decimal); hr1 = 25 (decimal) T_ID 0 - non-mode0 channel (8bits): 91 - Range = 41 (decimal); hr1 = 23 (decimal) T_ID 0 - non-mode0 channel (8bits): 71 - Range = 42 (decimal); hr1 = 18 (decimal) T_ID 0 - non-mode0 channel (8bits): B5 - Range = 43 (decimal); hr1 = 30 (decimal) T_ID 0 - non-mode0 channel (8bits): 33 - Range = 44 (decimal); hr1 = 8 (decimal) T_ID 0 - non-mode0 channel (8bits): C8 - Range = 45 (decimal); hr1 = 35 (decimal) T_ID 0 - non-mode0 channel (8bits): 83 - Range = 46 (decimal); hr1 = 23 (decimal) T_ID 0 - non-mode0 channel (8bits): 37 - Range = 47 (decimal); hr1 = 10 (decimal) T_ID 0 - non-mode0 channel (8bits): C5 - Range = 48 (decimal); hr1 = 36 (decimal) ********************************************************************** New DRBG octets: B3 97 AA E8 E5 02 C6 D3 BE 18 97 48 15 08 BB D5 ********************************************************************** T_ID 0 - non-mode0 channel (8bits): B3 - Range = 49 (decimal); hr1 = 34 (decimal) T_ID 0 - non-mode0 channel (8bits): 97 - Range = 50 (decimal); hr1 = 29 (decimal) T_ID 0 - non-mode0 channel (8bits): AA - Range = 51 (decimal); hr1 = 33 (decimal) T_ID 0 - non-mode0 channel (16bits): E8 E5 - Range = 52 (decimal); hr1 = 46 (decimal) T_ID 0 - non-mode0 channel (8bits): 02 - Range = 53 (decimal); hr1 = 0 (decimal) T_ID 0 - non-mode0 channel (8bits): C6 - Range = 54 (decimal); hr1 = 41 (decimal) T_ID 0 - non-mode0 channel (8bits): D3 - Range = 55 (decimal); hr1 = 45 (decimal) T_ID 0 - non-mode0 channel (8bits): BE - Range = 56 (decimal); hr1 = 41 (decimal) T_ID 0 - non-mode0 channel (8bits): 18 - Range = 57 (decimal); hr1 = 5 (decimal) T_ID 0 - non-mode0 channel (8bits): 97 - Range = 58 (decimal); hr1 = 34 (decimal) T_ID 0 - non-mode0 channel (8bits): 48 - Range = 59 (decimal); hr1 = 16 (decimal) T_ID 0 - non-mode0 channel (8bits): 15 - Range = 60 (decimal); hr1 = 4 (decimal) T_ID 0 - non-mode0 channel (8bits): 08 - Range = 61 (decimal); hr1 = 1 (decimal) T_ID 0 - non-mode0 channel (8bits): BB - Range = 62 (decimal); hr1 = 45 (decimal) T_ID 0 - non-mode0 channel (8bits): D5 - Range = 63 (decimal); hr1 = 52 (decimal) ********************************************************************** New DRBG octets: 74 77 BB 6D 51 76 FF 51 5F 13 93 86 FB FA 7F 41 ********************************************************************** T_ID 0 - non-mode0 channel (8bits): 74 - Range = 64 (decimal); hr1 = 29 (decimal) T_ID 0 - non-mode0 channel (16bits): 77 BB - Range = 65 (decimal); hr1 = 47 (decimal) T_ID 0 - non-mode0 channel (16bits): 6D 51 - Range = 66 (decimal); hr1 = 20 (decimal) T_ID 0 - non-mode0 channel (8bits): 76 - Range = 67 (decimal); hr1 = 30 (decimal) T_ID 0 - non-mode0 channel (8bits): FF - Range = 68 (decimal); hr1 = 67 (decimal) T_ID 0 - non-mode0 channel (8bits): 51 - Range = 69 (decimal); hr1 = 21 (decimal) T_ID 0 - non-mode0 channel (8bits): 5F - Range = 70 (decimal); hr1 = 25 (decimal) T_ID 0 - non-mode0 channel (8bits): 13 - Range = 71 (decimal); hr1 = 5 (decimal) T_ID 0 - non-mode0 channel (8bits): 93 - Range = 72 (decimal); hr1 = 41 (decimal) T_ID 0 - Shuffled channels: 57 65 5 31 64 75 34 37 48 8 51 7 19 4 13 20 63 35 46 6 70 73 9 50 17 74 39 32 29 68 71 40 22 55 62 49 52 16 21 43 36 76 15 41 33 66 56 69 10 18 38 11 67 26 45 58 2 53 27 3 12 59 30 54 42 28 47 72 14 44 61 60 ********************************************************************** New DRBG octets: F8 82 2A 54 E0 7C 50 15 57 CD 98 51 69 D4 AC AB ********************************************************************** T_ID 2 - Submode insertion (8 bits): F8 - Range = 5 (decimal); hr1 = 4 (decimal) ********************************************************************** New DRBG octets: 3B 8E 7E 2A A8 D7 CF F1 CC 69 BE 13 75 1F B3 95 ********************************************************************** T_ID 3 - TPM extension (2 bits): 00 ********************************************************************** New DRBG octets: B4 8D B4 8C 41 33 DE 1D 71 B7 46 A1 61 8C 4D D9 ********************************************************************** T_ID 4 - Antenna path perm. (8 bits): B4 - Range = 24 (decimal); hr1 = 16 (decimal) Step=4 | Mode=2 T_ID 3 - TPM extension (2 bits): C0 T_ID 4 - Antenna path perm. (8 bits): 8D - Range = 24 (decimal); hr1 = 13 (decimal) Step=5 | Mode=2 T_ID 3 - TPM extension (2 bits): 80 T_ID 4 - Antenna path perm. (8 bits): B4 - Range = 24 (decimal); hr1 = 16 (decimal) Step=6 | Mode=2 T_ID 3 - TPM extension (2 bits): C0 T_ID 4 - Antenna path perm. (8 bits): 8C - Range = 24 (decimal); hr1 = 13 (decimal) Step=7 | Mode=2 T_ID 3 - TPM extension (2 bits): 80 T_ID 4 - Antenna path perm. (8 bits): 41 - Range = 24 (decimal); hr1 = 6 (decimal) Step=8 | Mode=2 T_ID 3 - TPM extension (2 bits): 00 T_ID 4 - Antenna path perm. (8 bits): 33 - Range = 24 (decimal); hr1 = 4 (decimal) Step=9 | Mode=1 ********************************************************************** New DRBG octets: A6 93 A0 3E 16 9E ED DC 3D 54 2C 1A 6B 2E B7 48 ********************************************************************** T_ID 5 - RTT AA candidates (128 bits): A6 93 A0 3E 16 9E ED DC 3D 54 2C 1A 6B 2E B7 48 T_ID 5 - Initiator first 32-bit score: 8 T_ID 5 - Initiator second 32-bit score: 6 T_ID 5 - Initiator chosen PN pattern: 16 9E ED DC T_ID 5 - Reflector first 32-bit score: 20 T_ID 5 - Reflector second 32-bit score: 14 T_ID 5 - Reflector chosen PN pattern: 6B 2E B7 48 ********************************************************************** New DRBG octets: 72 26 4D 65 1E 54 6E 3B A1 7E 46 61 A5 00 90 67 ********************************************************************** T_ID 6 - SS marker position initiator (8 bits): 72 - Range = 29 (decimal); hr1 = 12 (decimal) T_ID 6 - SS marker position reflector (8 bits): 26 - Range = 29 (decimal); hr1 = 4 (decimal) ********************************************************************** New DRBG octets: 7D CB DA 7B 6E 5E A2 0C 32 0D C2 4F 8E 2C 72 5D ********************************************************************** T_ID 7 - SS marker sig. sel. initiator (1 bits): 00 T_ID 7 - SS marker sig. sel. reflector (1 bits): 80 Step=10 | Mode=2 T_ID 2 - Submode insertion (8 bits): 82 - Range = 5 (decimal); hr1 = 2 (decimal) T_ID 3 - TPM extension (2 bits): C0 T_ID 4 - Antenna path perm. (8 bits): DE - Range = 24 (decimal); hr1 = 20 (decimal) Step=11 | Mode=2 T_ID 3 - TPM extension (2 bits): 80 T_ID 4 - Antenna path perm. (8 bits): 1D - Range = 24 (decimal); hr1 = 2 (decimal) Step=12 | Mode=2 T_ID 3 - TPM extension (2 bits): 40 T_ID 4 - Antenna path perm. (8 bits): 71 - Range = 24 (decimal); hr1 = 10 (decimal) Step=13 | Mode=2 T_ID 3 - TPM extension (2 bits): C0 T_ID 4 - Antenna path perm. (8 bits): B7 - Range = 24 (decimal); hr1 = 17 (decimal) Step=14 | Mode=1 ********************************************************************** New DRBG octets: F7 21 97 86 9D 82 D2 EC 80 69 7C 5B 57 17 64 70 ********************************************************************** T_ID 5 - RTT AA candidates (128 bits): F7 21 97 86 9D 82 D2 EC 80 69 7C 5B 57 17 64 70 T_ID 5 - Initiator first 32-bit score: 10 T_ID 5 - Initiator second 32-bit score: 12 T_ID 5 - Initiator chosen PN pattern: F7 21 97 86 T_ID 5 - Reflector first 32-bit score: 14 T_ID 5 - Reflector second 32-bit score: 10 T_ID 5 - Reflector chosen PN pattern: 57 17 64 70 T_ID 6 - SS marker position initiator (8 bits): 4D - Range = 29 (decimal); hr1 = 8 (decimal) T_ID 6 - SS marker position reflector (8 bits): 65 - Range = 29 (decimal); hr1 = 11 (decimal) T_ID 7 - SS marker sig. sel. initiator (1 bits): 80 T_ID 7 - SS marker sig. sel. reflector (1 bits): 80 Step=15 | Mode=2 T_ID 2 - Submode insertion (8 bits): 2A - Range = 5 (decimal); hr1 = 0 (decimal) T_ID 3 - TPM extension (2 bits): C0 T_ID 4 - Antenna path perm. (8 bits): 46 - Range = 24 (decimal); hr1 = 6 (decimal) Step=16 | Mode=2 T_ID 3 - TPM extension (2 bits): 80 T_ID 4 - Antenna path perm. (8 bits): A1 - Range = 24 (decimal); hr1 = 15 (decimal) Step=17 | Mode=1 ********************************************************************** New DRBG octets: 17 46 62 CD 92 22 DB 8B 0C 22 D1 19 C8 C5 97 E5 ********************************************************************** T_ID 5 - RTT AA candidates (128 bits): 17 46 62 CD 92 22 DB 8B 0C 22 D1 19 C8 C5 97 E5 T_ID 5 - Initiator first 32-bit score: 14 T_ID 5 - Initiator second 32-bit score: 16 T_ID 5 - Initiator chosen PN pattern: 17 46 62 CD T_ID 5 - Reflector first 32-bit score: 6 T_ID 5 - Reflector second 32-bit score: 6 T_ID 5 - Reflector chosen PN pattern: C8 C5 97 E5 T_ID 6 - SS marker position initiator (8 bits): 1E - Range = 29 (decimal); hr1 = 3 (decimal) T_ID 6 - SS marker position reflector (8 bits): 54 - Range = 29 (decimal); hr1 = 9 (decimal) T_ID 7 - SS marker sig. sel. initiator (1 bits): 80 T_ID 7 - SS marker sig. sel. reflector (1 bits): 80 Step=18 | Mode=2 T_ID 2 - Submode insertion (8 bits): 54 - Range = 5 (decimal); hr1 = 1 (decimal) T_ID 3 - TPM extension (2 bits): 00 T_ID 4 - Antenna path perm. (8 bits): 61 - Range = 24 (decimal); hr1 = 9 (decimal) Step=19 | Mode=2 T_ID 3 - TPM extension (2 bits): 80 T_ID 4 - Antenna path perm. (8 bits): 8C - Range = 24 (decimal); hr1 = 13 (decimal) Step=20 | Mode=2 T_ID 3 - TPM extension (2 bits): 80 T_ID 4 - Antenna path perm. (8 bits): 4D - Range = 24 (decimal); hr1 = 7 (decimal) Step=21 | Mode=0 ********************************************************************** New DRBG octets: AF 9F 78 48 26 29 96 A3 85 E6 60 4F 82 3B 87 C2 ********************************************************************** T_ID 5 - RTT AA candidates (128 bits): AF 9F 78 48 26 29 96 A3 85 E6 60 4F 82 3B 87 C2 T_ID 5 - Initiator first 32-bit score: 10 T_ID 5 - Initiator second 32-bit score: 14 T_ID 5 - Initiator chosen PN pattern: AF 9F 78 48 T_ID 5 - Reflector first 32-bit score: 12 T_ID 5 - Reflector second 32-bit score: 18 T_ID 5 - Reflector chosen PN pattern: 85 E6 60 4F Step=22 | Mode=0 ********************************************************************** New DRBG octets: 3C 60 3B D2 E1 A3 41 67 B3 78 97 ED B4 B2 72 BF ********************************************************************** T_ID 5 - RTT AA candidates (128 bits): 3C 60 3B D2 E1 A3 41 67 B3 78 97 ED B4 B2 72 BF T_ID 5 - Initiator first 32-bit score: 10 T_ID 5 - Initiator second 32-bit score: 8 T_ID 5 - Initiator chosen PN pattern: E1 A3 41 67 T_ID 5 - Reflector first 32-bit score: 12 T_ID 5 - Reflector second 32-bit score: 12 T_ID 5 - Reflector chosen PN pattern: B4 B2 72 BF Step=23 | Mode=0 ********************************************************************** New DRBG octets: 59 5F E1 AA 5F 57 BA 90 82 5F 07 64 35 91 56 A4 ********************************************************************** T_ID 5 - RTT AA candidates (128 bits): 59 5F E1 AA 5F 57 BA 90 82 5F 07 64 35 91 56 A4 T_ID 5 - Initiator first 32-bit score: 18 T_ID 5 - Initiator second 32-bit score: 18 T_ID 5 - Initiator chosen PN pattern: 5F 57 BA 90 T_ID 5 - Reflector first 32-bit score: 10 T_ID 5 - Reflector second 32-bit score: 16 T_ID 5 - Reflector chosen PN pattern: 82 5F 07 64 Step=24 | Mode=2 T_ID 3 - TPM extension (2 bits): 80 T_ID 4 - Antenna path perm. (8 bits): D9 - Range = 24 (decimal); hr1 = 20 (decimal) Step=25 | Mode=1 ********************************************************************** New DRBG octets: 72 4B 10 38 16 33 91 44 07 98 41 98 61 3B C2 E8 ********************************************************************** T_ID 5 - RTT AA candidates (128 bits): 72 4B 10 38 16 33 91 44 07 98 41 98 61 3B C2 E8 T_ID 5 - Initiator first 32-bit score: 8 T_ID 5 - Initiator second 32-bit score: 12 T_ID 5 - Initiator chosen PN pattern: 72 4B 10 38 T_ID 5 - Reflector first 32-bit score: 20 T_ID 5 - Reflector second 32-bit score: 6 T_ID 5 - Reflector chosen PN pattern: 61 3B C2 E8 T_ID 6 - SS marker position initiator (8 bits): 6E - Range = 29 (decimal); hr1 = 12 (decimal) T_ID 6 - SS marker position reflector (8 bits): 3B - Range = 29 (decimal); hr1 = 6 (decimal) T_ID 7 - SS marker sig. sel. initiator (1 bits): 00 T_ID 7 - SS marker sig. sel. reflector (1 bits): 80 Step=26 | Mode=2 T_ID 2 - Submode insertion (8 bits): E0 - Range = 5 (decimal); hr1 = 4 (decimal) T_ID 3 - TPM extension (2 bits): 80 ********************************************************************** New DRBG octets: 1B 36 9E 49 12 D6 92 B3 BB F8 47 DD B4 8D 59 9B ********************************************************************** T_ID 4 - Antenna path perm. (8 bits): 1B - Range = 24 (decimal); hr1 = 2 (decimal) Step=27 | Mode=2 T_ID 3 - TPM extension (2 bits): 80 T_ID 4 - Antenna path perm. (8 bits): 36 - Range = 24 (decimal); hr1 = 5 (decimal) Step=28 | Mode=2 T_ID 3 - TPM extension (2 bits): 80 T_ID 4 - Antenna path perm. (8 bits): 9E - Range = 24 (decimal); hr1 = 14 (decimal) Step=29 | Mode=2 T_ID 3 - TPM extension (2 bits): 00 T_ID 4 - Antenna path perm. (8 bits): 49 - Range = 24 (decimal); hr1 = 6 (decimal) Step=30 | Mode=2 T_ID 3 - TPM extension (2 bits): C0 T_ID 4 - Antenna path perm. (8 bits): 12 - Range = 24 (decimal); hr1 = 1 (decimal) Step=31 | Mode=2 T_ID 3 - TPM extension (2 bits): 40 T_ID 4 - Antenna path perm. (8 bits): D6 - Range = 24 (decimal); hr1 = 20 (decimal) Step=32 | Mode=1 ********************************************************************** New DRBG octets: 2C E0 B1 90 2B FA F8 37 7A B0 91 BF A7 37 8B DC ********************************************************************** T_ID 5 - RTT AA candidates (128 bits): 2C E0 B1 90 2B FA F8 37 7A B0 91 BF A7 37 8B DC T_ID 5 - Initiator first 32-bit score: 10 T_ID 5 - Initiator second 32-bit score: 16 T_ID 5 - Initiator chosen PN pattern: 2C E0 B1 90 T_ID 5 - Reflector first 32-bit score: 8 T_ID 5 - Reflector second 32-bit score: 10 T_ID 5 - Reflector chosen PN pattern: 7A B0 91 BF T_ID 6 - SS marker position initiator (8 bits): A1 - Range = 29 (decimal); hr1 = 18 (decimal) T_ID 6 - SS marker position reflector (8 bits): 7E - Range = 29 (decimal); hr1 = 14 (decimal) T_ID 7 - SS marker sig. sel. initiator (1 bits): 80 T_ID 7 - SS marker sig. sel. reflector (1 bits): 80 Step=33 | Mode=2 T_ID 2 - Submode insertion (8 bits): 7C - Range = 5 (decimal); hr1 = 2 (decimal) T_ID 3 - TPM extension (2 bits): 40 T_ID 4 - Antenna path perm. (8 bits): 92 - Range = 24 (decimal); hr1 = 13 (decimal) Step=34 | Mode=2 T_ID 3 - TPM extension (2 bits): C0 T_ID 4 - Antenna path perm. (8 bits): B3 - Range = 24 (decimal); hr1 = 16 (decimal) Step=35 | Mode=2 T_ID 3 - TPM extension (2 bits): C0 T_ID 4 - Antenna path perm. (8 bits): BB - Range = 24 (decimal); hr1 = 17 (decimal) Step=36 | Mode=2 T_ID 3 - TPM extension (2 bits): 00 T_ID 4 - Antenna path perm. (8 bits): F8 - Range = 24 (decimal); hr1 = 23 (decimal) Step=37 | Mode=1 ********************************************************************** New DRBG octets: A3 5E 66 E1 FC 19 2D CF 4C 1C 10 C0 41 10 AB 72 ********************************************************************** T_ID 5 - RTT AA candidates (128 bits): A3 5E 66 E1 FC 19 2D CF 4C 1C 10 C0 41 10 AB 72 T_ID 5 - Initiator first 32-bit score: 12 T_ID 5 - Initiator second 32-bit score: 14 T_ID 5 - Initiator chosen PN pattern: A3 5E 66 E1 T_ID 5 - Reflector first 32-bit score: 12 T_ID 5 - Reflector second 32-bit score: 12 T_ID 5 - Reflector chosen PN pattern: 41 10 AB 72 T_ID 6 - SS marker position initiator (8 bits): 46 - Range = 29 (decimal); hr1 = 7 (decimal) T_ID 6 - SS marker position reflector (8 bits): 61 - Range = 29 (decimal); hr1 = 10 (decimal) T_ID 7 - SS marker sig. sel. initiator (1 bits): 00 T_ID 7 - SS marker sig. sel. reflector (1 bits): 00 Step=38 | Mode=2 T_ID 2 - Submode insertion (8 bits): 50 - Range = 5 (decimal); hr1 = 1 (decimal) T_ID 3 - TPM extension (2 bits): C0 T_ID 4 - Antenna path perm. (8 bits): 47 - Range = 24 (decimal); hr1 = 6 (decimal) Step=39 | Mode=2 T_ID 3 - TPM extension (2 bits): C0 T_ID 4 - Antenna path perm. (8 bits): DD - Range = 24 (decimal); hr1 = 20 (decimal) Step=40 | Mode=2 T_ID 3 - TPM extension (2 bits): C0 T_ID 4 - Antenna path perm. (8 bits): B4 - Range = 24 (decimal); hr1 = 16 (decimal) Step=41 | Mode=0 ********************************************************************** New DRBG octets: F9 75 C7 DA 8C C1 CB C7 5E A9 A3 F9 C2 EF B6 90 ********************************************************************** T_ID 5 - RTT AA candidates (128 bits): F9 75 C7 DA 8C C1 CB C7 5E A9 A3 F9 C2 EF B6 90 T_ID 5 - Initiator first 32-bit score: 8 T_ID 5 - Initiator second 32-bit score: 26 T_ID 5 - Initiator chosen PN pattern: F9 75 C7 DA T_ID 5 - Reflector first 32-bit score: 12 T_ID 5 - Reflector second 32-bit score: 12 T_ID 5 - Reflector chosen PN pattern: C2 EF B6 90 Step=42 | Mode=0 ********************************************************************** New DRBG octets: 94 27 94 24 2B 7D 51 F3 3E 76 6F CB 96 52 E3 61 ********************************************************************** T_ID 5 - RTT AA candidates (128 bits): 94 27 94 24 2B 7D 51 F3 3E 76 6F CB 96 52 E3 61 T_ID 5 - Initiator first 32-bit score: 8 T_ID 5 - Initiator second 32-bit score: 14 T_ID 5 - Initiator chosen PN pattern: 94 27 94 24 T_ID 5 - Reflector first 32-bit score: 14 T_ID 5 - Reflector second 32-bit score: 12 T_ID 5 - Reflector chosen PN pattern: 96 52 E3 61 Step=43 | Mode=0 ********************************************************************** New DRBG octets: 51 17 E6 D9 19 D2 9F 36 65 42 19 F8 BC 7E 01 7A ********************************************************************** T_ID 5 - RTT AA candidates (128 bits): 51 17 E6 D9 19 D2 9F 36 65 42 19 F8 BC 7E 01 7A T_ID 5 - Initiator first 32-bit score: 10 T_ID 5 - Initiator second 32-bit score: 10 T_ID 5 - Initiator chosen PN pattern: 19 D2 9F 36 T_ID 5 - Reflector first 32-bit score: 6 T_ID 5 - Reflector second 32-bit score: 20 T_ID 5 - Reflector chosen PN pattern: 65 42 19 F8 Step=44 | Mode=2 T_ID 3 - TPM extension (2 bits): C0 T_ID 4 - Antenna path perm. (8 bits): 8D - Range = 24 (decimal); hr1 = 13 (decimal) Step=45 | Mode=1 ********************************************************************** New DRBG octets: 3A FC C9 66 2A 84 09 59 B4 39 B7 28 A5 56 83 81 ********************************************************************** T_ID 5 - RTT AA candidates (128 bits): 3A FC C9 66 2A 84 09 59 B4 39 B7 28 A5 56 83 81 T_ID 5 - Initiator first 32-bit score: 12 T_ID 5 - Initiator second 32-bit score: 16 T_ID 5 - Initiator chosen PN pattern: 3A FC C9 66 T_ID 5 - Reflector first 32-bit score: 8 T_ID 5 - Reflector second 32-bit score: 20 T_ID 5 - Reflector chosen PN pattern: B4 39 B7 28 T_ID 6 - SS marker position initiator (8 bits): A5 - Range = 29 (decimal); hr1 = 18 (decimal) T_ID 6 - SS marker position reflector (8 bits): 90 - Range = 29 (decimal); hr1 = 16 (decimal) T_ID 7 - SS marker sig. sel. initiator (1 bits): 80 T_ID 7 - SS marker sig. sel. reflector (1 bits): 00 Step=46 | Mode=2 T_ID 2 - Submode insertion (8 bits): 15 - Range = 5 (decimal); hr1 = 0 (decimal) T_ID 3 - TPM extension (2 bits): 00 T_ID 4 - Antenna path perm. (8 bits): 59 - Range = 24 (decimal); hr1 = 8 (decimal) Step=47 | Mode=2 T_ID 3 - TPM extension (2 bits): 40 T_ID 4 - Antenna path perm. (8 bits): 9B - Range = 24 (decimal); hr1 = 14 (decimal) Step=48 | Mode=1 ********************************************************************** New DRBG octets: 87 D7 D1 62 B8 30 DB BE 77 34 24 24 C7 AE 18 FE ********************************************************************** T_ID 5 - RTT AA candidates (128 bits): 87 D7 D1 62 B8 30 DB BE 77 34 24 24 C7 AE 18 FE T_ID 5 - Initiator first 32-bit score: 10 T_ID 5 - Initiator second 32-bit score: 8 T_ID 5 - Initiator chosen PN pattern: B8 30 DB BE T_ID 5 - Reflector first 32-bit score: 12 T_ID 5 - Reflector second 32-bit score: 20 T_ID 5 - Reflector chosen PN pattern: 77 34 24 24 T_ID 6 - SS marker position initiator (8 bits): 67 - Range = 29 (decimal); hr1 = 11 (decimal) ********************************************************************** New DRBG octets: 32 27 9A 3D 88 04 52 18 AF DA 47 5C 50 DB 6F 3C ********************************************************************** T_ID 6 - SS marker position reflector (8 bits): 32 - Range = 29 (decimal); hr1 = 5 (decimal) T_ID 7 - SS marker sig. sel. initiator (1 bits): 80 T_ID 7 - SS marker sig. sel. reflector (1 bits): 80 Step=49 | Mode=2 T_ID 2 - Submode insertion (8 bits): 57 - Range = 5 (decimal); hr1 = 1 (decimal) T_ID 3 - TPM extension (2 bits): C0 ********************************************************************** New DRBG octets: 4A B2 C3 2F 35 67 74 81 52 56 29 D0 32 8A 1E BF ********************************************************************** T_ID 4 - Antenna path perm. (8 bits): 4A - Range = 24 (decimal); hr1 = 6 (decimal) Step=50 | Mode=2 T_ID 3 - TPM extension (2 bits): 00 T_ID 4 - Antenna path perm. (8 bits): B2 - Range = 24 (decimal); hr1 = 16 (decimal) Step=51 | Mode=2 T_ID 3 - TPM extension (2 bits): C0 T_ID 4 - Antenna path perm. (8 bits): C3 - Range = 24 (decimal); hr1 = 18 (decimal) Step=52 | Mode=1 ********************************************************************** New DRBG octets: 29 3A 71 72 62 7E C2 74 4A 63 9D 3C 78 9D 64 25 ********************************************************************** T_ID 5 - RTT AA candidates (128 bits): 29 3A 71 72 62 7E C2 74 4A 63 9D 3C 78 9D 64 25 T_ID 5 - Initiator first 32-bit score: 12 T_ID 5 - Initiator second 32-bit score: 10 T_ID 5 - Initiator chosen PN pattern: 62 7E C2 74 T_ID 5 - Reflector first 32-bit score: 16 T_ID 5 - Reflector second 32-bit score: 6 T_ID 5 - Reflector chosen PN pattern: 78 9D 64 25 T_ID 6 - SS marker position initiator (8 bits): 27 - Range = 29 (decimal); hr1 = 4 (decimal) T_ID 6 - SS marker position reflector (8 bits): 9A - Range = 29 (decimal); hr1 = 17 (decimal) T_ID 7 - SS marker sig. sel. initiator (1 bits): 80 T_ID 7 - SS marker sig. sel. reflector (1 bits): 80 Step=53 | Mode=2 T_ID 2 - Submode insertion (8 bits): CD - Range = 5 (decimal); hr1 = 4 (decimal) T_ID 3 - TPM extension (2 bits): 00 T_ID 4 - Antenna path perm. (8 bits): 2F - Range = 24 (decimal); hr1 = 4 (decimal) Step=54 | Mode=2 T_ID 3 - TPM extension (2 bits): 40 T_ID 4 - Antenna path perm. (8 bits): 35 - Range = 24 (decimal); hr1 = 4 (decimal) Step=55 | Mode=2 T_ID 3 - TPM extension (2 bits): 80 T_ID 4 - Antenna path perm. (8 bits): 67 - Range = 24 (decimal); hr1 = 9 (decimal) Step=56 | Mode=2 T_ID 3 - TPM extension (2 bits): 80 T_ID 4 - Antenna path perm. (8 bits): 74 - Range = 24 (decimal); hr1 = 10 (decimal) Step=57 | Mode=2 T_ID 3 - TPM extension (2 bits): 40 T_ID 4 - Antenna path perm. (8 bits): 81 - Range = 24 (decimal); hr1 = 12 (decimal) Step=58 | Mode=2 T_ID 3 - TPM extension (2 bits): 80 T_ID 4 - Antenna path perm. (8 bits): 52 - Range = 24 (decimal); hr1 = 7 (decimal) Step=59 | Mode=1 ********************************************************************** New DRBG octets: AE 8A 62 36 0B 80 CD 62 1F BB FF 19 A6 E7 E5 E2 ********************************************************************** T_ID 5 - RTT AA candidates (128 bits): AE 8A 62 36 0B 80 CD 62 1F BB FF 19 A6 E7 E5 E2 T_ID 5 - Initiator first 32-bit score: 12 T_ID 5 - Initiator second 32-bit score: 4 T_ID 5 - Initiator chosen PN pattern: 0B 80 CD 62 T_ID 5 - Reflector first 32-bit score: 20 T_ID 5 - Reflector second 32-bit score: 4 T_ID 5 - Reflector chosen PN pattern: A6 E7 E5 E2 T_ID 6 - SS marker position initiator (8 bits): 3D - Range = 29 (decimal); hr1 = 6 (decimal) T_ID 6 - SS marker position reflector (8 bits): 88 - Range = 29 (decimal); hr1 = 15 (decimal) T_ID 7 - SS marker sig. sel. initiator (1 bits): 00 T_ID 7 - SS marker sig. sel. reflector (1 bits): 80 Step=60 | Mode=0 ********************************************************************** New DRBG octets: 59 D1 03 4C 30 03 73 84 75 24 FA 34 78 DD AC 66 ********************************************************************** T_ID 5 - RTT AA candidates (128 bits): 59 D1 03 4C 30 03 73 84 75 24 FA 34 78 DD AC 66 T_ID 5 - Initiator first 32-bit score: 6 T_ID 5 - Initiator second 32-bit score: 14 T_ID 5 - Initiator chosen PN pattern: 59 D1 03 4C T_ID 5 - Reflector first 32-bit score: 8 T_ID 5 - Reflector second 32-bit score: 14 T_ID 5 - Reflector chosen PN pattern: 75 24 FA 34 Step=61 | Mode=0 ********************************************************************** New DRBG octets: 3B 07 5A 7F 92 91 D5 EB 76 C5 32 55 7E 2B 6E DB ********************************************************************** T_ID 5 - RTT AA candidates (128 bits): 3B 07 5A 7F 92 91 D5 EB 76 C5 32 55 7E 2B 6E DB T_ID 5 - Initiator first 32-bit score: 8 T_ID 5 - Initiator second 32-bit score: 14 T_ID 5 - Initiator chosen PN pattern: 3B 07 5A 7F T_ID 5 - Reflector first 32-bit score: 14 T_ID 5 - Reflector second 32-bit score: 12 T_ID 5 - Reflector chosen PN pattern: 7E 2B 6E DB Step=62 | Mode=0 ********************************************************************** New DRBG octets: B1 74 51 AC 18 FE 87 44 AC 7E 27 CF 18 9D 44 87 ********************************************************************** T_ID 5 - RTT AA candidates (128 bits): B1 74 51 AC 18 FE 87 44 AC 7E 27 CF 18 9D 44 87 T_ID 5 - Initiator first 32-bit score: 12 T_ID 5 - Initiator second 32-bit score: 14 T_ID 5 - Initiator chosen PN pattern: B1 74 51 AC T_ID 5 - Reflector first 32-bit score: 12 T_ID 5 - Reflector second 32-bit score: 8 T_ID 5 - Reflector chosen PN pattern: 18 9D 44 87 Step=63 | Mode=2 T_ID 3 - TPM extension (2 bits): C0 T_ID 4 - Antenna path perm. (8 bits): 56 - Range = 24 (decimal); hr1 = 8 (decimal) Step=64 | Mode=2 T_ID 2 - Submode insertion (8 bits): 98 - Range = 5 (decimal); hr1 = 2 (decimal) T_ID 3 - TPM extension (2 bits): C0 T_ID 4 - Antenna path perm. (8 bits): 29 - Range = 24 (decimal); hr1 = 3 (decimal) Step=65 | Mode=2 T_ID 3 - TPM extension (2 bits): 80 T_ID 4 - Antenna path perm. (8 bits): D0 - Range = 24 (decimal); hr1 = 19 (decimal) Step=66 | Mode=2 T_ID 3 - TPM extension (2 bits): 00 T_ID 4 - Antenna path perm. (8 bits): 32 - Range = 24 (decimal); hr1 = 4 (decimal) Step=67 | Mode=2 T_ID 3 - TPM extension (2 bits): 40 T_ID 4 - Antenna path perm. (8 bits): 8A - Range = 24 (decimal); hr1 = 12 (decimal) Step=68 | Mode=1 ********************************************************************** New DRBG octets: 76 44 70 57 97 3E 93 E5 DC 7A 6D 6A 8C D6 38 ED ********************************************************************** T_ID 5 - RTT AA candidates (128 bits): 76 44 70 57 97 3E 93 E5 DC 7A 6D 6A 8C D6 38 ED T_ID 5 - Initiator first 32-bit score: 6 T_ID 5 - Initiator second 32-bit score: 6 T_ID 5 - Initiator chosen PN pattern: 97 3E 93 E5 T_ID 5 - Reflector first 32-bit score: 8 T_ID 5 - Reflector second 32-bit score: 20 T_ID 5 - Reflector chosen PN pattern: DC 7A 6D 6A T_ID 6 - SS marker position initiator (8 bits): 04 - Range = 29 (decimal); hr1 = 0 (decimal) T_ID 6 - SS marker position reflector (8 bits): 52 - Range = 29 (decimal); hr1 = 9 (decimal) T_ID 7 - SS marker sig. sel. initiator (1 bits): 80 T_ID 7 - SS marker sig. sel. reflector (1 bits): 00 Step=69 | Mode=2 T_ID 2 - Submode insertion (8 bits): 51 - Range = 5 (decimal); hr1 = 1 (decimal) T_ID 3 - TPM extension (2 bits): 00 T_ID 4 - Antenna path perm. (8 bits): 1E - Range = 24 (decimal); hr1 = 2 (decimal) Step=70 | Mode=2 T_ID 3 - TPM extension (2 bits): C0 T_ID 4 - Antenna path perm. (8 bits): BF - Range = 24 (decimal); hr1 = 17 (decimal) Step=71 | Mode=2 T_ID 3 - TPM extension (2 bits): 40 ********************************************************************** New DRBG octets: 36 77 E6 E4 59 5B 6C EF 8A AC 2E CF 59 8D 5E C0 ********************************************************************** T_ID 4 - Antenna path perm. (8 bits): 36 - Range = 24 (decimal); hr1 = 5 (decimal) Step=72 | Mode=1 ********************************************************************** New DRBG octets: 72 54 52 61 69 F2 5A 0D CC CA 4F CE BD 8A 88 1E ********************************************************************** T_ID 5 - RTT AA candidates (128 bits): 72 54 52 61 69 F2 5A 0D CC CA 4F CE BD 8A 88 1E T_ID 5 - Initiator first 32-bit score: 10 T_ID 5 - Initiator second 32-bit score: 14 T_ID 5 - Initiator chosen PN pattern: 72 54 52 61 T_ID 5 - Reflector first 32-bit score: 14 T_ID 5 - Reflector second 32-bit score: 10 T_ID 5 - Reflector chosen PN pattern: BD 8A 88 1E T_ID 6 - SS marker position initiator (8 bits): 18 - Range = 29 (decimal); hr1 = 2 (decimal) T_ID 6 - SS marker position reflector (8 bits): AF - Range = 29 (decimal); hr1 = 19 (decimal) T_ID 7 - SS marker sig. sel. initiator (1 bits): 80 T_ID 7 - SS marker sig. sel. reflector (1 bits): 00 Step=73 | Mode=2 T_ID 2 - Submode insertion (8 bits): 69 - Range = 5 (decimal); hr1 = 2 (decimal) T_ID 3 - TPM extension (2 bits): C0 T_ID 4 - Antenna path perm. (8 bits): 77 - Range = 24 (decimal); hr1 = 11 (decimal) Step=74 | Mode=2 T_ID 3 - TPM extension (2 bits): 40 T_ID 4 - Antenna path perm. (8 bits): E6 - Range = 24 (decimal); hr1 = 21 (decimal) Step=75 | Mode=2 T_ID 3 - TPM extension (2 bits): 40 T_ID 4 - Antenna path perm. (8 bits): E4 - Range = 24 (decimal); hr1 = 21 (decimal) Step=76 | Mode=2 T_ID 3 - TPM extension (2 bits): 00 T_ID 4 - Antenna path perm. (8 bits): 59 - Range = 24 (decimal); hr1 = 8 (decimal) Step=77 | Mode=1 ********************************************************************** New DRBG octets: 9F B8 94 20 27 F3 AA 36 81 84 73 90 7C 34 35 07 ********************************************************************** T_ID 5 - RTT AA candidates (128 bits): 9F B8 94 20 27 F3 AA 36 81 84 73 90 7C 34 35 07 T_ID 5 - Initiator first 32-bit score: 12 T_ID 5 - Initiator second 32-bit score: 2 T_ID 5 - Initiator chosen PN pattern: 27 F3 AA 36 T_ID 5 - Reflector first 32-bit score: 18 T_ID 5 - Reflector second 32-bit score: 14 T_ID 5 - Reflector chosen PN pattern: 7C 34 35 07 T_ID 6 - SS marker position initiator (8 bits): DA - Range = 29 (decimal); hr1 = 24 (decimal) T_ID 6 - SS marker position reflector (8 bits): 5C - Range = 29 (decimal); hr1 = 10 (decimal) T_ID 7 - SS marker sig. sel. initiator (1 bits): 00 T_ID 7 - SS marker sig. sel. reflector (1 bits): 80 Step=78 | Mode=2 T_ID 2 - Submode insertion (8 bits): D4 - Range = 5 (decimal); hr1 = 4 (decimal) T_ID 3 - TPM extension (2 bits): 40 T_ID 4 - Antenna path perm. (8 bits): 5B - Range = 24 (decimal); hr1 = 8 (decimal) Step=79 | Mode=2 T_ID 3 - TPM extension (2 bits): C0 T_ID 4 - Antenna path perm. (8 bits): 6C - Range = 24 (decimal); hr1 = 10 (decimal) Step=80 | Mode=2 T_ID 3 - TPM extension (2 bits): C0 T_ID 4 - Antenna path perm. (8 bits): EF - Range = 24 (decimal); hr1 = 22 (decimal) Step=81 | Mode=2 T_ID 3 - TPM extension (2 bits): 80 T_ID 4 - Antenna path perm. (8 bits): 8A - Range = 24 (decimal); hr1 = 12 (decimal) Step=82 | Mode=0 ********************************************************************** New DRBG octets: 83 70 FC 0A A7 A6 53 65 E1 13 9F 67 7B B9 53 86 ********************************************************************** T_ID 5 - RTT AA candidates (128 bits): 83 70 FC 0A A7 A6 53 65 E1 13 9F 67 7B B9 53 86 T_ID 5 - Initiator first 32-bit score: 18 T_ID 5 - Initiator second 32-bit score: 20 T_ID 5 - Initiator chosen PN pattern: 83 70 FC 0A T_ID 5 - Reflector first 32-bit score: 16 T_ID 5 - Reflector second 32-bit score: 10 T_ID 5 - Reflector chosen PN pattern: 7B B9 53 86 Step=83 | Mode=0 ********************************************************************** New DRBG octets: AE D2 9E 4D 5E A1 01 54 C3 9B 02 8E 21 3D C0 DD ********************************************************************** T_ID 5 - RTT AA candidates (128 bits): AE D2 9E 4D 5E A1 01 54 C3 9B 02 8E 21 3D C0 DD T_ID 5 - Initiator first 32-bit score: 16 T_ID 5 - Initiator second 32-bit score: 24 T_ID 5 - Initiator chosen PN pattern: AE D2 9E 4D T_ID 5 - Reflector first 32-bit score: 16 T_ID 5 - Reflector second 32-bit score: 8 T_ID 5 - Reflector chosen PN pattern: 21 3D C0 DD Step=84 | Mode=0 ********************************************************************** New DRBG octets: 7A 61 88 D2 B3 D8 C1 09 1C 1B 06 35 A7 9B 42 2F ********************************************************************** T_ID 5 - RTT AA candidates (128 bits): 7A 61 88 D2 B3 D8 C1 09 1C 1B 06 35 A7 9B 42 2F T_ID 5 - Initiator first 32-bit score: 8 T_ID 5 - Initiator second 32-bit score: 12 T_ID 5 - Initiator chosen PN pattern: 7A 61 88 D2 T_ID 5 - Reflector first 32-bit score: 16 T_ID 5 - Reflector second 32-bit score: 4 T_ID 5 - Reflector chosen PN pattern: A7 9B 42 2F Step=85 | Mode=2 T_ID 3 - TPM extension (2 bits): C0 T_ID 4 - Antenna path perm. (8 bits): AC - Range = 24 (decimal); hr1 = 16 (decimal) Step=86 | Mode=2 T_ID 3 - TPM extension (2 bits): 00 T_ID 4 - Antenna path perm. (8 bits): 2E - Range = 24 (decimal); hr1 = 4 (decimal) Step=87 | Mode=2 T_ID 3 - TPM extension (2 bits): C0 T_ID 4 - Antenna path perm. (8 bits): CF - Range = 24 (decimal); hr1 = 19 (decimal) Step=88 | Mode=1 ********************************************************************** New DRBG octets: 05 81 5B E5 5E 76 9B EA C5 67 5D CF EC 89 79 12 ********************************************************************** T_ID 5 - RTT AA candidates (128 bits): 05 81 5B E5 5E 76 9B EA C5 67 5D CF EC 89 79 12 T_ID 5 - Initiator first 32-bit score: 14 T_ID 5 - Initiator second 32-bit score: 8 T_ID 5 - Initiator chosen PN pattern: 5E 76 9B EA T_ID 5 - Reflector first 32-bit score: 12 T_ID 5 - Reflector second 32-bit score: 16 T_ID 5 - Reflector chosen PN pattern: C5 67 5D CF T_ID 6 - SS marker position initiator (8 bits): DB - Range = 29 (decimal); hr1 = 24 (decimal) T_ID 6 - SS marker position reflector (8 bits): 6F - Range = 29 (decimal); hr1 = 12 (decimal) T_ID 7 - SS marker sig. sel. initiator (1 bits): 80 T_ID 7 - SS marker sig. sel. reflector (1 bits): 80 Step=89 | Mode=2 T_ID 2 - Submode insertion (8 bits): AC - Range = 5 (decimal); hr1 = 3 (decimal) T_ID 3 - TPM extension (2 bits): 80 T_ID 4 - Antenna path perm. (8 bits): 59 - Range = 24 (decimal); hr1 = 8 (decimal) Step=90 | Mode=2 T_ID 3 - TPM extension (2 bits): 40 T_ID 4 - Antenna path perm. (8 bits): 8D - Range = 24 (decimal); hr1 = 13 (decimal) Step=91 | Mode=2 T_ID 3 - TPM extension (2 bits): 40 T_ID 4 - Antenna path perm. (8 bits): 5E - Range = 24 (decimal); hr1 = 8 (decimal) Step=92 | Mode=2 T_ID 3 - TPM extension (2 bits): 40 ********************************************************************** New DRBG octets: 85 C3 62 27 BA 61 FE 15 53 3D DF A0 BD 1A DC 23 ********************************************************************** T_ID 4 - Antenna path perm. (8 bits): 85 - Range = 24 (decimal); hr1 = 12 (decimal) Step=93 | Mode=2 ********************************************************************** New DRBG octets: 74 30 D2 5E 70 AE 7C F7 B5 44 F9 33 E6 5A F3 25 ********************************************************************** T_ID 3 - TPM extension (2 bits): 40 T_ID 4 - Antenna path perm. (8 bits): C3 - Range = 24 (decimal); hr1 = 18 (decimal) Step=94 | Mode=1 ********************************************************************** New DRBG octets: CF A8 D9 FB 13 04 07 7D 66 26 C7 0E 22 42 67 02 ********************************************************************** T_ID 5 - RTT AA candidates (128 bits): CF A8 D9 FB 13 04 07 7D 66 26 C7 0E 22 42 67 02 T_ID 5 - Initiator first 32-bit score: 6 T_ID 5 - Initiator second 32-bit score: 18 T_ID 5 - Initiator chosen PN pattern: CF A8 D9 FB T_ID 5 - Reflector first 32-bit score: 24 T_ID 5 - Reflector second 32-bit score: 12 T_ID 5 - Reflector chosen PN pattern: 22 42 67 02 T_ID 6 - SS marker position initiator (8 bits): 3C - Range = 29 (decimal); hr1 = 6 (decimal) ********************************************************************** New DRBG octets: 28 84 FE 25 8A 58 C6 5C 5B 6F 45 D8 83 94 8A B4 ********************************************************************** T_ID 6 - SS marker position reflector (8 bits): 28 - Range = 29 (decimal); hr1 = 4 (decimal) T_ID 7 - SS marker sig. sel. initiator (1 bits): 80 T_ID 7 - SS marker sig. sel. reflector (1 bits): 00 Step=95 | Mode=2 T_ID 2 - Submode insertion (8 bits): AB - Range = 5 (decimal); hr1 = 3 (decimal) T_ID 3 - TPM extension (2 bits): C0 T_ID 4 - Antenna path perm. (8 bits): 62 - Range = 24 (decimal); hr1 = 9 (decimal) Step=96 | Mode=2 T_ID 3 - TPM extension (2 bits): 40 T_ID 4 - Antenna path perm. (8 bits): 27 - Range = 24 (decimal); hr1 = 3 (decimal) Step=97 | Mode=2 T_ID 3 - TPM extension (2 bits): 00 T_ID 4 - Antenna path perm. (8 bits): BA - Range = 24 (decimal); hr1 = 17 (decimal) Step=98 | Mode=2 T_ID 3 - TPM extension (2 bits): 00 T_ID 4 - Antenna path perm. (8 bits): 61 - Range = 24 (decimal); hr1 = 9 (decimal) Step=99 | Mode=2 T_ID 3 - TPM extension (2 bits): C0 T_ID 4 - Antenna path perm. (8 bits): FE - Range = 24 (decimal); hr1 = 23 (decimal) Step=100 | Mode=1 ********************************************************************** New DRBG octets: B6 E1 30 8B 38 37 25 B0 CE 5D 24 0A 10 9E FE 07 ********************************************************************** T_ID 5 - RTT AA candidates (128 bits): B6 E1 30 8B 38 37 25 B0 CE 5D 24 0A 10 9E FE 07 T_ID 5 - Initiator first 32-bit score: 10 T_ID 5 - Initiator second 32-bit score: 12 T_ID 5 - Initiator chosen PN pattern: B6 E1 30 8B T_ID 5 - Reflector first 32-bit score: 6 T_ID 5 - Reflector second 32-bit score: 22 T_ID 5 - Reflector chosen PN pattern: CE 5D 24 0A T_ID 6 - SS marker position initiator (8 bits): 84 - Range = 29 (decimal); hr1 = 14 (decimal) T_ID 6 - SS marker position reflector (8 bits): FE - Range = 29 (decimal); hr1 = 28 (decimal) T_ID 7 - SS marker sig. sel. initiator (1 bits): 80 T_ID 7 - SS marker sig. sel. reflector (1 bits): 80 Step=101 | Mode=2 ********************************************************************** New DRBG octets: 54 AD 8A 11 F2 83 AD BE 5E 1D 5A E3 3C A4 B2 B4 ********************************************************************** T_ID 2 - Submode insertion (8 bits): 54 - Range = 5 (decimal); hr1 = 1 (decimal) T_ID 3 - TPM extension (2 bits): 00 T_ID 4 - Antenna path perm. (8 bits): 15 - Range = 24 (decimal); hr1 = 1 (decimal) Step=102 | Mode=2 T_ID 3 - TPM extension (2 bits): 00 T_ID 4 - Antenna path perm. (8 bits): 53 - Range = 24 (decimal); hr1 = 7 (decimal) Step=103 | Mode=2 T_ID 3 - TPM extension (2 bits): C0 T_ID 4 - Antenna path perm. (8 bits): 3D - Range = 24 (decimal); hr1 = 5 (decimal) Step=104 | Mode=0 ********************************************************************** New DRBG octets: 14 74 46 A3 21 4B 6A C5 AC 95 65 F2 A4 1E 82 3D ********************************************************************** T_ID 5 - RTT AA candidates (128 bits): 14 74 46 A3 21 4B 6A C5 AC 95 65 F2 A4 1E 82 3D T_ID 5 - Initiator first 32-bit score: 16 T_ID 5 - Initiator second 32-bit score: 18 T_ID 5 - Initiator chosen PN pattern: 14 74 46 A3 T_ID 5 - Reflector first 32-bit score: 16 T_ID 5 - Reflector second 32-bit score: 10 T_ID 5 - Reflector chosen PN pattern: A4 1E 82 3D Step=105 | Mode=0 ********************************************************************** New DRBG octets: 99 72 D6 75 CA 00 A1 61 94 E3 8F 9B 06 A2 9C 82 ********************************************************************** T_ID 5 - RTT AA candidates (128 bits): 99 72 D6 75 CA 00 A1 61 94 E3 8F 9B 06 A2 9C 82 T_ID 5 - Initiator first 32-bit score: 16 T_ID 5 - Initiator second 32-bit score: 14 T_ID 5 - Initiator chosen PN pattern: CA 00 A1 61 T_ID 5 - Reflector first 32-bit score: 20 T_ID 5 - Reflector second 32-bit score: 6 T_ID 5 - Reflector chosen PN pattern: 06 A2 9C 82 Step=106 | Mode=0 ********************************************************************** New DRBG octets: A9 18 D2 F4 BF 93 95 5D 2E 5D C9 9D 6A 7D 0D 47 ********************************************************************** T_ID 5 - RTT AA candidates (128 bits): A9 18 D2 F4 BF 93 95 5D 2E 5D C9 9D 6A 7D 0D 47 T_ID 5 - Initiator first 32-bit score: 8 T_ID 5 - Initiator second 32-bit score: 14 T_ID 5 - Initiator chosen PN pattern: A9 18 D2 F4 T_ID 5 - Reflector first 32-bit score: 12 T_ID 5 - Reflector second 32-bit score: 12 T_ID 5 - Reflector chosen PN pattern: 6A 7D 0D 47 Step=107 | Mode=2 T_ID 3 - TPM extension (2 bits): 40 T_ID 4 - Antenna path perm. (8 bits): DF - Range = 24 (decimal); hr1 = 20 (decimal) Step=108 | Mode=1 ********************************************************************** New DRBG octets: 9E 51 FD E2 B2 36 1E BE 3B 9E 68 DF CE D3 70 80 ********************************************************************** T_ID 5 - RTT AA candidates (128 bits): 9E 51 FD E2 B2 36 1E BE 3B 9E 68 DF CE D3 70 80 T_ID 5 - Initiator first 32-bit score: 10 T_ID 5 - Initiator second 32-bit score: 4 T_ID 5 - Initiator chosen PN pattern: B2 36 1E BE T_ID 5 - Reflector first 32-bit score: 14 T_ID 5 - Reflector second 32-bit score: 12 T_ID 5 - Reflector chosen PN pattern: CE D3 70 80 T_ID 6 - SS marker position initiator (8 bits): 25 - Range = 29 (decimal); hr1 = 4 (decimal) T_ID 6 - SS marker position reflector (8 bits): 8A - Range = 29 (decimal); hr1 = 15 (decimal) T_ID 7 - SS marker sig. sel. initiator (1 bits): 00 T_ID 7 - SS marker sig. sel. reflector (1 bits): 80 Step=109 | Mode=2 T_ID 2 - Submode insertion (8 bits): AD - Range = 5 (decimal); hr1 = 3 (decimal) T_ID 3 - TPM extension (2 bits): 00 T_ID 4 - Antenna path perm. (8 bits): BD - Range = 24 (decimal); hr1 = 17 (decimal) Step=110 | Mode=2 T_ID 3 - TPM extension (2 bits): 80 T_ID 4 - Antenna path perm. (8 bits): 1A - Range = 24 (decimal); hr1 = 2 (decimal) Step=111 | Mode=2 T_ID 3 - TPM extension (2 bits): 40 T_ID 4 - Antenna path perm. (8 bits): DC - Range = 24 (decimal); hr1 = 20 (decimal)

8.1.3. Set 3

From the CS Configuration procedure:

ChM = 0x00 00 00 00 00 00 00 1F FF FC
ChM_Repetition = 2
Main_Mode = 0x02
Sub_Mode = 0x03
Main_Mode_Min_Steps = 2
Main_Mode_Max_Steps = 6
Main_Mode_Repetition = 0
Mode_0_Steps = 3
RTT_Type = 0x01
Role = 0b01
ChSel = 0

From the CS Start procedure:

Subevent_Len – setup to include at least 20 steps
Procedure_Count = 2
ACI = 7

******************************* INSTANTIATION FUNCTION ********************************** h9() instantiation ***************************************************************************************** Entropy input Peripheral (CS_IV_P): E1 0B C2 8A 0B FD DF E9 Entropy input Central (CS_IV_C): 3E 7F 51 86 E0 CA 0B 3B Entropy input (CS_IV): E1 0B C2 8A 0B FD DF E9 3E 7F 51 86 E0 CA 0B 3B Nonce Peripheral (CS_IN_P): 9F F4 77 C1 Nonce Central (CS_IN_C): 86 73 84 0D Nonce (CS_IN): 9F F4 77 C1 86 73 84 0D Personalization string Peripheral (CS_PV_P): C9 80 DE DF 98 82 ED 44 Personalization string Central (CS_PV_C): 64 A6 74 96 78 68 F1 43 Personalization string (CS_PV): C9 80 DE DF 98 82 ED 44 64 A6 74 96 78 68 F1 43 *********************** f8 function start ********************** **************************** f7 function start *************************** f7 K input: 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F f7 V||S input: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 28 00 00 00 20 E1 0B C2 8A 0B FD DF E9 3E 7F 51 86 E0 CA 0B 3B 9F F4 77 C1 86 73 84 0D C9 80 DE DF 98 82 ED 44 64 A6 74 96 78 68 F1 43 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f7 K2 output: 8B 2B 06 DC 52 2D 3E 0A F0 A5 0C AF 48 10 E0 35 **************************** f7 function end ***************************** **************************** f7 function start *************************** f7 K input: 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F f7 V||S input: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 28 00 00 00 20 E1 0B C2 8A 0B FD DF E9 3E 7F 51 86 E0 CA 0B 3B 9F F4 77 C1 86 73 84 0D C9 80 DE DF 98 82 ED 44 64 A6 74 96 78 68 F1 43 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f7 X output: A3 4F BE 57 F8 F9 7E 34 9D 15 A3 76 79 60 74 64 **************************** f7 function end ***************************** f8 SM output: B6 02 B1 B2 8C 6F 0A 3D DA E6 37 B4 84 25 08 7D DC 18 8C 89 A1 B0 CD FD A1 E8 FC 66 C9 99 97 50 ************************ f8 function end *********************** *********************************** INITIAL K and V ************************************* K: EE E0 4D 7C 76 11 3A 5C EC 99 2A E3 20 C2 4D 27 V: DF 90 56 47 C1 06 6E 6F 52 C0 3E DF B8 2B 69 28 ***************************************************************************************** ******************************* CHANNEL SOUNDING SEQUENCE ******************************* ************************************** Channel map ************************************** Bit-map: 00 00 00 00 00 00 00 1F FF FC Filtered channels: 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 ************************************ CS Procedure: 0 ************************************ *** INITIAL K and V *** K: EE E0 4D 7C 76 11 3A 5C EC 99 2A E3 20 C2 4D 27 V: DF 90 56 47 C1 06 6E 6F 52 C0 3E DF B8 2B 69 28 Step=0 | Mode=0 ********************************************************************** New DRBG octets: FF BC C1 CA 39 A6 9D C4 07 38 EF 33 D9 D1 35 32 ********************************************************************** T_ID 1 - mode0 channel (8bits): FF - Range = 2 (decimal); hr1 = 1 (decimal) T_ID 1 - mode0 channel (8bits): BC - Range = 3 (decimal); hr1 = 2 (decimal) T_ID 1 - mode0 channel (8bits): C1 - Range = 4 (decimal); hr1 = 3 (decimal) T_ID 1 - mode0 channel (8bits): CA - Range = 5 (decimal); hr1 = 3 (decimal) T_ID 1 - mode0 channel (8bits): 39 - Range = 6 (decimal); hr1 = 1 (decimal) T_ID 1 - mode0 channel (8bits): A6 - Range = 7 (decimal); hr1 = 4 (decimal) T_ID 1 - mode0 channel (8bits): 9D - Range = 8 (decimal); hr1 = 4 (decimal) T_ID 1 - mode0 channel (8bits): C4 - Range = 9 (decimal); hr1 = 6 (decimal) T_ID 1 - mode0 channel (8bits): 07 - Range = 10 (decimal); hr1 = 0 (decimal) T_ID 1 - mode0 channel (8bits): 38 - Range = 11 (decimal); hr1 = 2 (decimal) T_ID 1 - mode0 channel (8bits): EF - Range = 12 (decimal); hr1 = 11 (decimal) T_ID 1 - mode0 channel (8bits): 33 - Range = 13 (decimal); hr1 = 2 (decimal) T_ID 1 - mode0 channel (8bits): D9 - Range = 14 (decimal); hr1 = 11 (decimal) T_ID 1 - mode0 channel (8bits): D1 - Range = 15 (decimal); hr1 = 12 (decimal) T_ID 1 - mode0 channel (8bits): 35 - Range = 16 (decimal); hr1 = 3 (decimal) T_ID 1 - mode0 channel (8bits): 32 - Range = 17 (decimal); hr1 = 3 (decimal) ********************************************************************** New DRBG octets: 51 EE 4B B0 3E E6 D0 A1 71 87 1C 2E 60 46 8F 6C ********************************************************************** T_ID 1 - mode0 channel (8bits): 51 - Range = 18 (decimal); hr1 = 5 (decimal) T_ID 1 - mode0 channel (8bits): EE - Range = 19 (decimal); hr1 = 17 (decimal) T_ID 1 - Shuffled channels: 11 7 14 18 9 19 10 8 5 2 4 15 16 13 12 6 17 20 3 ********************************************************************** New DRBG octets: 0C 00 E4 AA 6C 37 6A B8 00 B8 C5 5D F0 79 BC 3A ********************************************************************** T_ID 5 - RTT AA candidates (128 bits): 0C 00 E4 AA 6C 37 6A B8 00 B8 C5 5D F0 79 BC 3A T_ID 5 - Initiator first 32-bit score: 12 T_ID 5 - Initiator second 32-bit score: 8 T_ID 5 - Initiator chosen PN pattern: 6C 37 6A B8 T_ID 5 - Reflector first 32-bit score: 16 T_ID 5 - Reflector second 32-bit score: 16 T_ID 5 - Reflector chosen PN pattern: F0 79 BC 3A Step=1 | Mode=0 ********************************************************************** New DRBG octets: 01 1C AE 4E 99 47 D1 B5 D0 6A CD DA C7 F8 F9 37 ********************************************************************** T_ID 5 - RTT AA candidates (128 bits): 01 1C AE 4E 99 47 D1 B5 D0 6A CD DA C7 F8 F9 37 T_ID 5 - Initiator first 32-bit score: 6 T_ID 5 - Initiator second 32-bit score: 8 T_ID 5 - Initiator chosen PN pattern: 01 1C AE 4E T_ID 5 - Reflector first 32-bit score: 10 T_ID 5 - Reflector second 32-bit score: 14 T_ID 5 - Reflector chosen PN pattern: D0 6A CD DA Step=2 | Mode=0 ********************************************************************** New DRBG octets: 64 06 12 14 86 05 AF EA 71 55 0B DD 28 94 2F 38 ********************************************************************** T_ID 5 - RTT AA candidates (128 bits): 64 06 12 14 86 05 AF EA 71 55 0B DD 28 94 2F 38 T_ID 5 - Initiator first 32-bit score: 10 T_ID 5 - Initiator second 32-bit score: 12 T_ID 5 - Initiator chosen PN pattern: 64 06 12 14 T_ID 5 - Reflector first 32-bit score: 28 T_ID 5 - Reflector second 32-bit score: 8 T_ID 5 - Reflector chosen PN pattern: 28 94 2F 38 Step=3 | Mode=2 ********************************************************************** New DRBG octets: 32 73 A2 2D 88 47 DA 6A 1C 2C BD 8C E8 96 79 62 ********************************************************************** T_ID 0 - non-mode0 channel (8bits): 32 - Range = 2 (decimal); hr1 = 0 (decimal) T_ID 0 - non-mode0 channel (8bits): 73 - Range = 3 (decimal); hr1 = 1 (decimal) T_ID 0 - non-mode0 channel (8bits): A2 - Range = 4 (decimal); hr1 = 2 (decimal) T_ID 0 - non-mode0 channel (8bits): 2D - Range = 5 (decimal); hr1 = 0 (decimal) T_ID 0 - non-mode0 channel (8bits): 88 - Range = 6 (decimal); hr1 = 3 (decimal) T_ID 0 - non-mode0 channel (8bits): 47 - Range = 7 (decimal); hr1 = 1 (decimal) T_ID 0 - non-mode0 channel (8bits): DA - Range = 8 (decimal); hr1 = 6 (decimal) T_ID 0 - non-mode0 channel (8bits): 6A - Range = 9 (decimal); hr1 = 3 (decimal) T_ID 0 - non-mode0 channel (8bits): 1C - Range = 10 (decimal); hr1 = 1 (decimal) T_ID 0 - non-mode0 channel (8bits): 2C - Range = 11 (decimal); hr1 = 1 (decimal) T_ID 0 - non-mode0 channel (8bits): BD - Range = 12 (decimal); hr1 = 8 (decimal) T_ID 0 - non-mode0 channel (8bits): 8C - Range = 13 (decimal); hr1 = 7 (decimal) T_ID 0 - non-mode0 channel (8bits): E8 - Range = 14 (decimal); hr1 = 12 (decimal) T_ID 0 - non-mode0 channel (8bits): 96 - Range = 15 (decimal); hr1 = 8 (decimal) T_ID 0 - non-mode0 channel (8bits): 79 - Range = 16 (decimal); hr1 = 7 (decimal) T_ID 0 - non-mode0 channel (8bits): 62 - Range = 17 (decimal); hr1 = 6 (decimal) ********************************************************************** New DRBG octets: AB D1 0C 59 DD BD D9 F3 05 20 F7 D0 EF 37 8E BE ********************************************************************** T_ID 0 - non-mode0 channel (8bits): AB - Range = 18 (decimal); hr1 = 12 (decimal) T_ID 0 - non-mode0 channel (8bits): D1 - Range = 19 (decimal); hr1 = 15 (decimal) T_ID 0 - Shuffled channels: 6 12 5 10 3 2 18 17 16 8 11 7 19 4 13 20 9 15 14 ********************************************************************** New DRBG octets: F8 82 2A 54 E0 7C 50 15 57 CD 98 51 69 D4 AC AB ********************************************************************** T_ID 2 - Submode insertion (8 bits): F8 - Range = 5 (decimal); hr1 = 4 (decimal) ********************************************************************** New DRBG octets: 3B 8E 7E 2A A8 D7 CF F1 CC 69 BE 13 75 1F B3 95 ********************************************************************** T_ID 3 - TPM extension (2 bits): 00 ********************************************************************** New DRBG octets: B4 8D B4 8C 41 33 DE 1D 71 B7 46 A1 61 8C 4D D9 ********************************************************************** T_ID 4 - Antenna path perm. (8 bits): B4 - Range = 24 (decimal); hr1 = 16 (decimal) Step=4 | Mode=2 T_ID 3 - TPM extension (2 bits): C0 T_ID 4 - Antenna path perm. (8 bits): 8D - Range = 24 (decimal); hr1 = 13 (decimal) Step=5 | Mode=2 T_ID 3 - TPM extension (2 bits): 80 T_ID 4 - Antenna path perm. (8 bits): B4 - Range = 24 (decimal); hr1 = 16 (decimal) Step=6 | Mode=2 T_ID 3 - TPM extension (2 bits): C0 T_ID 4 - Antenna path perm. (8 bits): 8C - Range = 24 (decimal); hr1 = 13 (decimal) Step=7 | Mode=2 T_ID 3 - TPM extension (2 bits): 80 T_ID 4 - Antenna path perm. (8 bits): 41 - Range = 24 (decimal); hr1 = 6 (decimal) Step=8 | Mode=2 T_ID 3 - TPM extension (2 bits): 00 T_ID 4 - Antenna path perm. (8 bits): 33 - Range = 24 (decimal); hr1 = 4 (decimal) Step=9 | Mode=3 T_ID 3 - TPM extension (2 bits): C0 T_ID 4 - Antenna path perm. (8 bits): DE - Range = 24 (decimal); hr1 = 20 (decimal) ********************************************************************** New DRBG octets: A6 93 A0 3E 16 9E ED DC 3D 54 2C 1A 6B 2E B7 48 ********************************************************************** T_ID 5 - RTT AA candidates (128 bits): A6 93 A0 3E 16 9E ED DC 3D 54 2C 1A 6B 2E B7 48 T_ID 5 - Initiator first 32-bit score: 8 T_ID 5 - Initiator second 32-bit score: 6 T_ID 5 - Initiator chosen PN pattern: 16 9E ED DC T_ID 5 - Reflector first 32-bit score: 20 T_ID 5 - Reflector second 32-bit score: 14 T_ID 5 - Reflector chosen PN pattern: 6B 2E B7 48 ********************************************************************** New DRBG octets: 72 26 4D 65 1E 54 6E 3B A1 7E 46 61 A5 00 90 67 ********************************************************************** T_ID 6 - SS marker position initiator (8 bits): 72 - Range = 29 (decimal); hr1 = 12 (decimal) T_ID 6 - SS marker position reflector (8 bits): 26 - Range = 29 (decimal); hr1 = 4 (decimal) ********************************************************************** New DRBG octets: 7D CB DA 7B 6E 5E A2 0C 32 0D C2 4F 8E 2C 72 5D ********************************************************************** T_ID 7 - SS marker sig. sel. initiator (1 bits): 00 T_ID 7 - SS marker sig. sel. reflector (1 bits): 80 Step=10 | Mode=2 T_ID 2 - Submode insertion (8 bits): 82 - Range = 5 (decimal); hr1 = 2 (decimal) T_ID 3 - TPM extension (2 bits): 80 T_ID 4 - Antenna path perm. (8 bits): 1D - Range = 24 (decimal); hr1 = 2 (decimal) Step=11 | Mode=2 T_ID 3 - TPM extension (2 bits): 40 T_ID 4 - Antenna path perm. (8 bits): 71 - Range = 24 (decimal); hr1 = 10 (decimal) Step=12 | Mode=2 T_ID 3 - TPM extension (2 bits): C0 T_ID 4 - Antenna path perm. (8 bits): B7 - Range = 24 (decimal); hr1 = 17 (decimal) Step=13 | Mode=2 T_ID 3 - TPM extension (2 bits): C0 T_ID 4 - Antenna path perm. (8 bits): 46 - Range = 24 (decimal); hr1 = 6 (decimal) Step=14 | Mode=3 T_ID 3 - TPM extension (2 bits): 80 T_ID 4 - Antenna path perm. (8 bits): A1 - Range = 24 (decimal); hr1 = 15 (decimal) ********************************************************************** New DRBG octets: F7 21 97 86 9D 82 D2 EC 80 69 7C 5B 57 17 64 70 ********************************************************************** T_ID 5 - RTT AA candidates (128 bits): F7 21 97 86 9D 82 D2 EC 80 69 7C 5B 57 17 64 70 T_ID 5 - Initiator first 32-bit score: 10 T_ID 5 - Initiator second 32-bit score: 12 T_ID 5 - Initiator chosen PN pattern: F7 21 97 86 T_ID 5 - Reflector first 32-bit score: 14 T_ID 5 - Reflector second 32-bit score: 10 T_ID 5 - Reflector chosen PN pattern: 57 17 64 70 T_ID 6 - SS marker position initiator (8 bits): 4D - Range = 29 (decimal); hr1 = 8 (decimal) T_ID 6 - SS marker position reflector (8 bits): 65 - Range = 29 (decimal); hr1 = 11 (decimal) T_ID 7 - SS marker sig. sel. initiator (1 bits): 80 T_ID 7 - SS marker sig. sel. reflector (1 bits): 80 Step=15 | Mode=2 T_ID 2 - Submode insertion (8 bits): 2A - Range = 5 (decimal); hr1 = 0 (decimal) T_ID 3 - TPM extension (2 bits): 00 T_ID 4 - Antenna path perm. (8 bits): 61 - Range = 24 (decimal); hr1 = 9 (decimal) Step=16 | Mode=2 T_ID 3 - TPM extension (2 bits): 80 T_ID 4 - Antenna path perm. (8 bits): 8C - Range = 24 (decimal); hr1 = 13 (decimal) Step=17 | Mode=3 T_ID 3 - TPM extension (2 bits): 80 T_ID 4 - Antenna path perm. (8 bits): 4D - Range = 24 (decimal); hr1 = 7 (decimal) ********************************************************************** New DRBG octets: 17 46 62 CD 92 22 DB 8B 0C 22 D1 19 C8 C5 97 E5 ********************************************************************** T_ID 5 - RTT AA candidates (128 bits): 17 46 62 CD 92 22 DB 8B 0C 22 D1 19 C8 C5 97 E5 T_ID 5 - Initiator first 32-bit score: 14 T_ID 5 - Initiator second 32-bit score: 16 T_ID 5 - Initiator chosen PN pattern: 17 46 62 CD T_ID 5 - Reflector first 32-bit score: 6 T_ID 5 - Reflector second 32-bit score: 6 T_ID 5 - Reflector chosen PN pattern: C8 C5 97 E5 T_ID 6 - SS marker position initiator (8 bits): 1E - Range = 29 (decimal); hr1 = 3 (decimal) T_ID 6 - SS marker position reflector (8 bits): 54 - Range = 29 (decimal); hr1 = 9 (decimal) T_ID 7 - SS marker sig. sel. initiator (1 bits): 80 T_ID 7 - SS marker sig. sel. reflector (1 bits): 80 Step=18 | Mode=2 T_ID 2 - Submode insertion (8 bits): 54 - Range = 5 (decimal); hr1 = 1 (decimal) T_ID 3 - TPM extension (2 bits): 80 T_ID 4 - Antenna path perm. (8 bits): D9 - Range = 24 (decimal); hr1 = 20 (decimal) Step=19 | Mode=2 T_ID 3 - TPM extension (2 bits): 80 ********************************************************************** New DRBG octets: CE 5A DE D7 79 BC 1F DB E5 AE A3 FC 92 0B 05 31 ********************************************************************** T_ID 4 - Antenna path perm. (8 bits): CE - Range = 24 (decimal); hr1 = 19 (decimal) Step=20 | Mode=0 ********************************************************************** New DRBG octets: 33 3E 3C 9D 31 E0 44 B6 7B 3F 20 38 AF D6 73 AC ********************************************************************** T_ID 5 - RTT AA candidates (128 bits): 33 3E 3C 9D 31 E0 44 B6 7B 3F 20 38 AF D6 73 AC T_ID 5 - Initiator first 32-bit score: 22 T_ID 5 - Initiator second 32-bit score: 10 T_ID 5 - Initiator chosen PN pattern: 31 E0 44 B6 T_ID 5 - Reflector first 32-bit score: 12 T_ID 5 - Reflector second 32-bit score: 8 T_ID 5 - Reflector chosen PN pattern: AF D6 73 AC Step=21 | Mode=0 ********************************************************************** New DRBG octets: AF 9F 78 48 26 29 96 A3 85 E6 60 4F 82 3B 87 C2 ********************************************************************** T_ID 5 - RTT AA candidates (128 bits): AF 9F 78 48 26 29 96 A3 85 E6 60 4F 82 3B 87 C2 T_ID 5 - Initiator first 32-bit score: 10 T_ID 5 - Initiator second 32-bit score: 14 T_ID 5 - Initiator chosen PN pattern: AF 9F 78 48 T_ID 5 - Reflector first 32-bit score: 12 T_ID 5 - Reflector second 32-bit score: 18 T_ID 5 - Reflector chosen PN pattern: 85 E6 60 4F Step=22 | Mode=0 ********************************************************************** New DRBG octets: 3C 60 3B D2 E1 A3 41 67 B3 78 97 ED B4 B2 72 BF ********************************************************************** T_ID 5 - RTT AA candidates (128 bits): 3C 60 3B D2 E1 A3 41 67 B3 78 97 ED B4 B2 72 BF T_ID 5 - Initiator first 32-bit score: 10 T_ID 5 - Initiator second 32-bit score: 8 T_ID 5 - Initiator chosen PN pattern: E1 A3 41 67 T_ID 5 - Reflector first 32-bit score: 12 T_ID 5 - Reflector second 32-bit score: 12 T_ID 5 - Reflector chosen PN pattern: B4 B2 72 BF Step=23 | Mode=2 T_ID 3 - TPM extension (2 bits): 80 T_ID 4 - Antenna path perm. (8 bits): 5A - Range = 24 (decimal); hr1 = 8 (decimal) Step=24 | Mode=3 T_ID 3 - TPM extension (2 bits): 80 T_ID 4 - Antenna path perm. (8 bits): DE - Range = 24 (decimal); hr1 = 20 (decimal) ********************************************************************** New DRBG octets: A9 83 4E D5 F0 71 EC A6 35 17 86 10 A6 EE AA 04 ********************************************************************** T_ID 5 - RTT AA candidates (128 bits): A9 83 4E D5 F0 71 EC A6 35 17 86 10 A6 EE AA 04 T_ID 5 - Initiator first 32-bit score: 14 T_ID 5 - Initiator second 32-bit score: 14 T_ID 5 - Initiator chosen PN pattern: F0 71 EC A6 T_ID 5 - Reflector first 32-bit score: 10 T_ID 5 - Reflector second 32-bit score: 16 T_ID 5 - Reflector chosen PN pattern: 35 17 86 10 T_ID 6 - SS marker position initiator (8 bits): 6E - Range = 29 (decimal); hr1 = 12 (decimal) T_ID 6 - SS marker position reflector (8 bits): 3B - Range = 29 (decimal); hr1 = 6 (decimal) T_ID 7 - SS marker sig. sel. initiator (1 bits): 00 T_ID 7 - SS marker sig. sel. reflector (1 bits): 80 Step=25 | Mode=2 T_ID 0 - non-mode0 channel (8bits): 0C - Range = 2 (decimal); hr1 = 0 (decimal) T_ID 0 - non-mode0 channel (8bits): 59 - Range = 3 (decimal); hr1 = 1 (decimal) T_ID 0 - non-mode0 channel (8bits): DD - Range = 4 (decimal); hr1 = 3 (decimal) T_ID 0 - non-mode0 channel (8bits): BD - Range = 5 (decimal); hr1 = 3 (decimal) T_ID 0 - non-mode0 channel (8bits): D9 - Range = 6 (decimal); hr1 = 5 (decimal) T_ID 0 - non-mode0 channel (8bits): F3 - Range = 7 (decimal); hr1 = 6 (decimal) T_ID 0 - non-mode0 channel (8bits): 05 - Range = 8 (decimal); hr1 = 0 (decimal) T_ID 0 - non-mode0 channel (8bits): 20 - Range = 9 (decimal); hr1 = 1 (decimal) T_ID 0 - non-mode0 channel (8bits): F7 - Range = 10 (decimal); hr1 = 9 (decimal) T_ID 0 - non-mode0 channel (8bits): D0 - Range = 11 (decimal); hr1 = 8 (decimal) T_ID 0 - non-mode0 channel (8bits): EF - Range = 12 (decimal); hr1 = 11 (decimal) T_ID 0 - non-mode0 channel (8bits): 37 - Range = 13 (decimal); hr1 = 2 (decimal) T_ID 0 - non-mode0 channel (8bits): 8E - Range = 14 (decimal); hr1 = 7 (decimal) T_ID 0 - non-mode0 channel (8bits): BE - Range = 15 (decimal); hr1 = 11 (decimal) ********************************************************************** New DRBG octets: 73 F3 11 6C E1 09 5A 29 BF 4D E7 AD D7 CC 2C D4 ********************************************************************** T_ID 0 - non-mode0 channel (8bits): 73 - Range = 16 (decimal); hr1 = 7 (decimal) T_ID 0 - non-mode0 channel (8bits): F3 - Range = 17 (decimal); hr1 = 16 (decimal) T_ID 0 - non-mode0 channel (8bits): 11 - Range = 18 (decimal); hr1 = 1 (decimal) T_ID 0 - non-mode0 channel (16bits): 6C E1 - Range = 19 (decimal); hr1 = 16 (decimal) T_ID 0 - Shuffled channels: 9 19 14 6 5 7 8 17 12 11 4 16 2 3 13 15 20 10 18 T_ID 2 - Submode insertion (8 bits): E0 - Range = 5 (decimal); hr1 = 4 (decimal) T_ID 3 - TPM extension (2 bits): 00 T_ID 4 - Antenna path perm. (8 bits): D7 - Range = 24 (decimal); hr1 = 20 (decimal) Step=26 | Mode=2 T_ID 3 - TPM extension (2 bits): C0 T_ID 4 - Antenna path perm. (8 bits): 79 - Range = 24 (decimal); hr1 = 11 (decimal) Step=27 | Mode=2 T_ID 3 - TPM extension (2 bits): 40 T_ID 4 - Antenna path perm. (8 bits): BC - Range = 24 (decimal); hr1 = 17 (decimal) Step=28 | Mode=2 T_ID 3 - TPM extension (2 bits): 40 T_ID 4 - Antenna path perm. (8 bits): 1F - Range = 24 (decimal); hr1 = 2 (decimal) Step=29 | Mode=2 T_ID 3 - TPM extension (2 bits): C0 T_ID 4 - Antenna path perm. (8 bits): DB - Range = 24 (decimal); hr1 = 20 (decimal) Step=30 | Mode=2 T_ID 3 - TPM extension (2 bits): C0 T_ID 4 - Antenna path perm. (8 bits): E5 - Range = 24 (decimal); hr1 = 21 (decimal) Step=31 | Mode=3 T_ID 3 - TPM extension (2 bits): 00 T_ID 4 - Antenna path perm. (8 bits): AE - Range = 24 (decimal); hr1 = 16 (decimal) ********************************************************************** New DRBG octets: C0 F4 37 CB 2E D8 01 47 35 AF 5E 5D 02 0B 67 A1 ********************************************************************** T_ID 5 - RTT AA candidates (128 bits): C0 F4 37 CB 2E D8 01 47 35 AF 5E 5D 02 0B 67 A1 T_ID 5 - Initiator first 32-bit score: 10 T_ID 5 - Initiator second 32-bit score: 16 T_ID 5 - Initiator chosen PN pattern: C0 F4 37 CB T_ID 5 - Reflector first 32-bit score: 12 T_ID 5 - Reflector second 32-bit score: 16 T_ID 5 - Reflector chosen PN pattern: 35 AF 5E 5D T_ID 6 - SS marker position initiator (8 bits): A1 - Range = 29 (decimal); hr1 = 18 (decimal) T_ID 6 - SS marker position reflector (8 bits): 7E - Range = 29 (decimal); hr1 = 14 (decimal) T_ID 7 - SS marker sig. sel. initiator (1 bits): 80 T_ID 7 - SS marker sig. sel. reflector (1 bits): 80 Step=32 | Mode=2 T_ID 2 - Submode insertion (8 bits): 7C - Range = 5 (decimal); hr1 = 2 (decimal) T_ID 3 - TPM extension (2 bits): C0 T_ID 4 - Antenna path perm. (8 bits): A3 - Range = 24 (decimal); hr1 = 15 (decimal) Step=33 | Mode=2 T_ID 3 - TPM extension (2 bits): C0 T_ID 4 - Antenna path perm. (8 bits): FC - Range = 24 (decimal); hr1 = 23 (decimal) Step=34 | Mode=2 T_ID 3 - TPM extension (2 bits): C0 T_ID 4 - Antenna path perm. (8 bits): 92 - Range = 24 (decimal); hr1 = 13 (decimal) Step=35 | Mode=2 T_ID 3 - TPM extension (2 bits): C0 T_ID 4 - Antenna path perm. (8 bits): 05 - Range = 24 (decimal); hr1 = 0 (decimal) Step=36 | Mode=3 T_ID 3 - TPM extension (2 bits): 00 T_ID 4 - Antenna path perm. (8 bits): 31 - Range = 24 (decimal); hr1 = 4 (decimal) ********************************************************************** New DRBG octets: 2A 43 AB EB C6 D6 F2 E2 93 41 84 17 32 E6 82 31 ********************************************************************** T_ID 5 - RTT AA candidates (128 bits): 2A 43 AB EB C6 D6 F2 E2 93 41 84 17 32 E6 82 31 T_ID 5 - Initiator first 32-bit score: 22 T_ID 5 - Initiator second 32-bit score: 8 T_ID 5 - Initiator chosen PN pattern: C6 D6 F2 E2 T_ID 5 - Reflector first 32-bit score: 8 T_ID 5 - Reflector second 32-bit score: 12 T_ID 5 - Reflector chosen PN pattern: 93 41 84 17 T_ID 6 - SS marker position initiator (8 bits): 46 - Range = 29 (decimal); hr1 = 7 (decimal) T_ID 6 - SS marker position reflector (8 bits): 61 - Range = 29 (decimal); hr1 = 10 (decimal) T_ID 7 - SS marker sig. sel. initiator (1 bits): 00 T_ID 7 - SS marker sig. sel. reflector (1 bits): 00 Step=37 | Mode=2 T_ID 2 - Submode insertion (8 bits): 50 - Range = 5 (decimal); hr1 = 1 (decimal) T_ID 3 - TPM extension (2 bits): 40 ********************************************************************** New DRBG octets: 02 4C 7D 7E 4F 6A 09 9E C1 E0 6D F8 06 91 16 9B ********************************************************************** T_ID 4 - Antenna path perm. (8 bits): 02 - Range = 24 (decimal); hr1 = 0 (decimal) Step=38 | Mode=2 T_ID 3 - TPM extension (2 bits): C0 T_ID 4 - Antenna path perm. (8 bits): 4C - Range = 24 (decimal); hr1 = 7 (decimal) Step=39 | Mode=2 T_ID 3 - TPM extension (2 bits): 00 T_ID 4 - Antenna path perm. (8 bits): 7D - Range = 24 (decimal); hr1 = 11 (decimal) Step=40 | Mode=0 ********************************************************************** New DRBG octets: 78 4C A9 80 0A 58 C3 56 12 75 95 0B 6F 84 0E C6 ********************************************************************** T_ID 5 - RTT AA candidates (128 bits): 78 4C A9 80 0A 58 C3 56 12 75 95 0B 6F 84 0E C6 T_ID 5 - Initiator first 32-bit score: 4 T_ID 5 - Initiator second 32-bit score: 8 T_ID 5 - Initiator chosen PN pattern: 78 4C A9 80 T_ID 5 - Reflector first 32-bit score: 10 T_ID 5 - Reflector second 32-bit score: 10 T_ID 5 - Reflector chosen PN pattern: 6F 84 0E C6 Step=41 | Mode=0 ********************************************************************** New DRBG octets: F9 75 C7 DA 8C C1 CB C7 5E A9 A3 F9 C2 EF B6 90 ********************************************************************** T_ID 5 - RTT AA candidates (128 bits): F9 75 C7 DA 8C C1 CB C7 5E A9 A3 F9 C2 EF B6 90 T_ID 5 - Initiator first 32-bit score: 8 T_ID 5 - Initiator second 32-bit score: 26 T_ID 5 - Initiator chosen PN pattern: F9 75 C7 DA T_ID 5 - Reflector first 32-bit score: 12 T_ID 5 - Reflector second 32-bit score: 12 T_ID 5 - Reflector chosen PN pattern: C2 EF B6 90 Step=42 | Mode=0 ********************************************************************** New DRBG octets: 94 27 94 24 2B 7D 51 F3 3E 76 6F CB 96 52 E3 61 ********************************************************************** T_ID 5 - RTT AA candidates (128 bits): 94 27 94 24 2B 7D 51 F3 3E 76 6F CB 96 52 E3 61 T_ID 5 - Initiator first 32-bit score: 8 T_ID 5 - Initiator second 32-bit score: 14 T_ID 5 - Initiator chosen PN pattern: 94 27 94 24 T_ID 5 - Reflector first 32-bit score: 14 T_ID 5 - Reflector second 32-bit score: 12 T_ID 5 - Reflector chosen PN pattern: 96 52 E3 61 Step=43 | Mode=3 T_ID 3 - TPM extension (2 bits): C0 T_ID 4 - Antenna path perm. (8 bits): 7E - Range = 24 (decimal); hr1 = 11 (decimal) ********************************************************************** New DRBG octets: 51 17 E6 D9 19 D2 9F 36 65 42 19 F8 BC 7E 01 7A ********************************************************************** T_ID 5 - RTT AA candidates (128 bits): 51 17 E6 D9 19 D2 9F 36 65 42 19 F8 BC 7E 01 7A T_ID 5 - Initiator first 32-bit score: 10 T_ID 5 - Initiator second 32-bit score: 10 T_ID 5 - Initiator chosen PN pattern: 19 D2 9F 36 T_ID 5 - Reflector first 32-bit score: 6 T_ID 5 - Reflector second 32-bit score: 20 T_ID 5 - Reflector chosen PN pattern: 65 42 19 F8 T_ID 6 - SS marker position initiator (8 bits): A5 - Range = 29 (decimal); hr1 = 18 (decimal) T_ID 6 - SS marker position reflector (8 bits): 90 - Range = 29 (decimal); hr1 = 16 (decimal) T_ID 7 - SS marker sig. sel. initiator (1 bits): 80 T_ID 7 - SS marker sig. sel. reflector (1 bits): 00 Step=44 | Mode=2 T_ID 2 - Submode insertion (8 bits): 15 - Range = 5 (decimal); hr1 = 0 (decimal) T_ID 3 - TPM extension (2 bits): 00 T_ID 4 - Antenna path perm. (8 bits): 4F - Range = 24 (decimal); hr1 = 7 (decimal) Step=45 | Mode=2 T_ID 3 - TPM extension (2 bits): 40 T_ID 4 - Antenna path perm. (8 bits): 6A - Range = 24 (decimal); hr1 = 9 (decimal) Step=46 | Mode=3 T_ID 3 - TPM extension (2 bits): 80 T_ID 4 - Antenna path perm. (8 bits): 09 - Range = 24 (decimal); hr1 = 0 (decimal) ********************************************************************** New DRBG octets: 0B 4D 44 7F BF CD 8A 16 0D 8C 37 94 7D 89 D2 44 ********************************************************************** T_ID 5 - RTT AA candidates (128 bits): 0B 4D 44 7F BF CD 8A 16 0D 8C 37 94 7D 89 D2 44 T_ID 5 - Initiator first 32-bit score: 10 T_ID 5 - Initiator second 32-bit score: 8 T_ID 5 - Initiator chosen PN pattern: BF CD 8A 16 T_ID 5 - Reflector first 32-bit score: 10 T_ID 5 - Reflector second 32-bit score: 12 T_ID 5 - Reflector chosen PN pattern: 0D 8C 37 94 T_ID 6 - SS marker position initiator (8 bits): 67 - Range = 29 (decimal); hr1 = 11 (decimal) ********************************************************************** New DRBG octets: 85 85 4E 9A 21 C0 EB 14 70 9B F0 75 D6 B2 D2 1A ********************************************************************** T_ID 6 - SS marker position reflector (8 bits): 85 - Range = 29 (decimal); hr1 = 15 (decimal) T_ID 7 - SS marker sig. sel. initiator (1 bits): 80 T_ID 7 - SS marker sig. sel. reflector (1 bits): 80 ************************************** CS Procedure: 1 ********************************** *** UPDATED K and V *** K: F3 F4 CF 24 5F CE 86 B3 C6 9F AE 60 28 7E B5 AE V: 08 56 98 94 89 1F 2F 30 1E EC DB 38 B6 ED 54 B1 Step=0 | Mode=0 ********************************************************************** New DRBG octets: 70 C4 6C 6B 39 EB 34 06 0B 4B F5 3E 37 2D B8 3C ********************************************************************** T_ID 1 - mode0 channel (8bits): 70 - Range = 2 (decimal); hr1 = 0 (decimal) T_ID 1 - mode0 channel (8bits): C4 - Range = 3 (decimal); hr1 = 2 (decimal) T_ID 1 - mode0 channel (8bits): 6C - Range = 4 (decimal); hr1 = 1 (decimal) T_ID 1 - mode0 channel (8bits): 6B - Range = 5 (decimal); hr1 = 2 (decimal) T_ID 1 - mode0 channel (8bits): 39 - Range = 6 (decimal); hr1 = 1 (decimal) T_ID 1 - mode0 channel (8bits): EB - Range = 7 (decimal); hr1 = 6 (decimal) T_ID 1 - mode0 channel (8bits): 34 - Range = 8 (decimal); hr1 = 1 (decimal) T_ID 1 - mode0 channel (8bits): 06 - Range = 9 (decimal); hr1 = 0 (decimal) T_ID 1 - mode0 channel (8bits): 0B - Range = 10 (decimal); hr1 = 0 (decimal) T_ID 1 - mode0 channel (8bits): 4B - Range = 11 (decimal); hr1 = 3 (decimal) T_ID 1 - mode0 channel (8bits): F5 - Range = 12 (decimal); hr1 = 11 (decimal) T_ID 1 - mode0 channel (8bits): 3E - Range = 13 (decimal); hr1 = 3 (decimal) T_ID 1 - mode0 channel (16bits): 37 2D - Range = 14 (decimal); hr1 = 2 (decimal) T_ID 1 - mode0 channel (8bits): B8 - Range = 15 (decimal); hr1 = 10 (decimal) T_ID 1 - mode0 channel (8bits): 3C - Range = 16 (decimal); hr1 = 3 (decimal) ********************************************************************** New DRBG octets: E9 42 5B B2 07 D9 3F 82 08 44 AB 9D 59 29 7D 94 ********************************************************************** T_ID 1 - mode0 channel (8bits): E9 - Range = 17 (decimal); hr1 = 15 (decimal) T_ID 1 - mode0 channel (8bits): 42 - Range = 18 (decimal); hr1 = 4 (decimal) T_ID 1 - mode0 channel (8bits): 5B - Range = 19 (decimal); hr1 = 6 (decimal) T_ID 1 - Shuffled channels: 11 9 15 17 19 5 20 7 3 10 16 13 12 6 2 18 14 4 8 ********************************************************************** New DRBG octets: A8 83 E9 3C 5E 8F 03 B0 97 92 05 0C F0 8D A8 8C ********************************************************************** T_ID 5 - RTT AA candidates (128 bits): A8 83 E9 3C 5E 8F 03 B0 97 92 05 0C F0 8D A8 8C T_ID 5 - Initiator first 32-bit score: 6 T_ID 5 - Initiator second 32-bit score: 16 T_ID 5 - Initiator chosen PN pattern: A8 83 E9 3C T_ID 5 - Reflector first 32-bit score: 6 T_ID 5 - Reflector second 32-bit score: 6 T_ID 5 - Reflector chosen PN pattern: F0 8D A8 8C Step=1 | Mode=0 ********************************************************************** New DRBG octets: B6 3B F5 5D 77 25 FE AB 35 69 E3 05 F8 C6 13 4C ********************************************************************** T_ID 5 - RTT AA candidates (128 bits): B6 3B F5 5D 77 25 FE AB 35 69 E3 05 F8 C6 13 4C T_ID 5 - Initiator first 32-bit score: 14 T_ID 5 - Initiator second 32-bit score: 12 T_ID 5 - Initiator chosen PN pattern: 77 25 FE AB T_ID 5 - Reflector first 32-bit score: 8 T_ID 5 - Reflector second 32-bit score: 18 T_ID 5 - Reflector chosen PN pattern: 35 69 E3 05 Step=2 | Mode=0 ********************************************************************** New DRBG octets: EA 85 C1 73 5D 9C 54 E9 35 7D 25 A0 0C 50 EE A1 ********************************************************************** T_ID 5 - RTT AA candidates (128 bits): EA 85 C1 73 5D 9C 54 E9 35 7D 25 A0 0C 50 EE A1 T_ID 5 - Initiator first 32-bit score: 16 T_ID 5 - Initiator second 32-bit score: 16 T_ID 5 - Initiator chosen PN pattern: 5D 9C 54 E9 T_ID 5 - Reflector first 32-bit score: 18 T_ID 5 - Reflector second 32-bit score: 14 T_ID 5 - Reflector chosen PN pattern: 0C 50 EE A1 Step=3 | Mode=2 ********************************************************************** New DRBG octets: 09 66 3B 5C 15 02 92 2F 12 B1 9E 80 97 07 59 2E ********************************************************************** T_ID 0 - non-mode0 channel (8bits): 09 - Range = 2 (decimal); hr1 = 0 (decimal) T_ID 0 - non-mode0 channel (8bits): 66 - Range = 3 (decimal); hr1 = 1 (decimal) T_ID 0 - non-mode0 channel (8bits): 3B - Range = 4 (decimal); hr1 = 0 (decimal) T_ID 0 - non-mode0 channel (8bits): 5C - Range = 5 (decimal); hr1 = 1 (decimal) T_ID 0 - non-mode0 channel (8bits): 15 - Range = 6 (decimal); hr1 = 0 (decimal) T_ID 0 - non-mode0 channel (8bits): 02 - Range = 7 (decimal); hr1 = 0 (decimal) T_ID 0 - non-mode0 channel (8bits): 92 - Range = 8 (decimal); hr1 = 4 (decimal) T_ID 0 - non-mode0 channel (8bits): 2F - Range = 9 (decimal); hr1 = 1 (decimal) T_ID 0 - non-mode0 channel (8bits): 12 - Range = 10 (decimal); hr1 = 0 (decimal) T_ID 0 - non-mode0 channel (8bits): B1 - Range = 11 (decimal); hr1 = 7 (decimal) T_ID 0 - non-mode0 channel (8bits): 9E - Range = 12 (decimal); hr1 = 7 (decimal) T_ID 0 - non-mode0 channel (8bits): 80 - Range = 13 (decimal); hr1 = 6 (decimal) T_ID 0 - non-mode0 channel (8bits): 97 - Range = 14 (decimal); hr1 = 8 (decimal) T_ID 0 - non-mode0 channel (8bits): 07 - Range = 15 (decimal); hr1 = 0 (decimal) T_ID 0 - non-mode0 channel (8bits): 59 - Range = 16 (decimal); hr1 = 5 (decimal) T_ID 0 - non-mode0 channel (8bits): 2E - Range = 17 (decimal); hr1 = 3 (decimal) ********************************************************************** New DRBG octets: 71 32 82 FB F9 DA 15 66 58 00 50 86 3A 4F 64 66 ********************************************************************** T_ID 0 - non-mode0 channel (8bits): 71 - Range = 18 (decimal); hr1 = 7 (decimal) T_ID 0 - non-mode0 channel (8bits): 32 - Range = 19 (decimal); hr1 = 3 (decimal) T_ID 0 - Shuffled channels: 16 10 2 20 9 17 14 19 15 8 4 12 7 6 11 5 3 13 18 ********************************************************************** New DRBG octets: D0 D2 CA 3E A1 E4 B2 3E 5E 1A AA 76 CE CD 27 80 ********************************************************************** T_ID 2 - Submode insertion (8 bits): D0 - Range = 5 (decimal); hr1 = 4 (decimal) ********************************************************************** New DRBG octets: 53 14 F5 C9 8D 61 9E 80 A0 43 47 65 34 4A 61 F3 ********************************************************************** T_ID 3 - TPM extension (2 bits): 40 ********************************************************************** New DRBG octets: E8 1E B4 0E 75 3B 86 C4 6F C3 55 5B CB 3F B7 B8 ********************************************************************** T_ID 4 - Antenna path perm. (8 bits): E8 - Range = 24 (decimal); hr1 = 21 (decimal) Step=4 | Mode=2 T_ID 3 - TPM extension (2 bits): 40 T_ID 4 - Antenna path perm. (8 bits): 1E - Range = 24 (decimal); hr1 = 2 (decimal) Step=5 | Mode=2 T_ID 3 - TPM extension (2 bits): 00 T_ID 4 - Antenna path perm. (8 bits): B4 - Range = 24 (decimal); hr1 = 16 (decimal) Step=6 | Mode=2 T_ID 3 - TPM extension (2 bits): C0 T_ID 4 - Antenna path perm. (8 bits): 0E - Range = 24 (decimal); hr1 = 1 (decimal) Step=7 | Mode=2 T_ID 3 - TPM extension (2 bits): 00 T_ID 4 - Antenna path perm. (8 bits): 75 - Range = 24 (decimal); hr1 = 10 (decimal) Step=8 | Mode=2 T_ID 3 - TPM extension (2 bits): 40 T_ID 4 - Antenna path perm. (8 bits): 3B - Range = 24 (decimal); hr1 = 5 (decimal) Step=9 | Mode=3 T_ID 3 - TPM extension (2 bits): 40 T_ID 4 - Antenna path perm. (8 bits): 86 - Range = 24 (decimal); hr1 = 12 (decimal) ********************************************************************** New DRBG octets: 36 1A F9 D3 08 D4 BE 76 32 4E CC EE 59 EB D0 1B ********************************************************************** T_ID 5 - RTT AA candidates (128 bits): 36 1A F9 D3 08 D4 BE 76 32 4E CC EE 59 EB D0 1B T_ID 5 - Initiator first 32-bit score: 8 T_ID 5 - Initiator second 32-bit score: 2 T_ID 5 - Initiator chosen PN pattern: 08 D4 BE 76 T_ID 5 - Reflector first 32-bit score: 20 T_ID 5 - Reflector second 32-bit score: 8 T_ID 5 - Reflector chosen PN pattern: 59 EB D0 1B ********************************************************************** New DRBG octets: F8 B1 E5 EA 82 88 D4 57 3B D7 74 49 8F B2 3C 5D ********************************************************************** T_ID 6 - SS marker position initiator (8 bits): F8 - Range = 29 (decimal); hr1 = 28 (decimal) T_ID 6 - SS marker position reflector (8 bits): E5 - Range = 29 (decimal); hr1 = 26 (decimal) ********************************************************************** New DRBG octets: EC C2 57 DF E9 97 C5 CF 63 E4 4C 71 E3 23 34 38 ********************************************************************** T_ID 7 - SS marker sig. sel. initiator (1 bits): 80 T_ID 7 - SS marker sig. sel. reflector (1 bits): 80 Step=10 | Mode=2 T_ID 2 - Submode insertion (8 bits): D2 - Range = 5 (decimal); hr1 = 4 (decimal) T_ID 3 - TPM extension (2 bits): 00 T_ID 4 - Antenna path perm. (8 bits): C4 - Range = 24 (decimal); hr1 = 18 (decimal) Step=11 | Mode=2 T_ID 3 - TPM extension (2 bits): C0 T_ID 4 - Antenna path perm. (8 bits): 6F - Range = 24 (decimal); hr1 = 10 (decimal) Step=12 | Mode=2 T_ID 3 - TPM extension (2 bits): C0 T_ID 4 - Antenna path perm. (8 bits): C3 - Range = 24 (decimal); hr1 = 18 (decimal) Step=13 | Mode=2 T_ID 3 - TPM extension (2 bits): 40 T_ID 4 - Antenna path perm. (8 bits): 55 - Range = 24 (decimal); hr1 = 7 (decimal) Step=14 | Mode=2 T_ID 3 - TPM extension (2 bits): 40 T_ID 4 - Antenna path perm. (8 bits): 5B - Range = 24 (decimal); hr1 = 8 (decimal) Step=15 | Mode=2 T_ID 3 - TPM extension (2 bits): C0 T_ID 4 - Antenna path perm. (8 bits): 3F - Range = 24 (decimal); hr1 = 5 (decimal) Step=16 | Mode=3 T_ID 3 - TPM extension (2 bits): 00 T_ID 4 - Antenna path perm. (8 bits): B7 - Range = 24 (decimal); hr1 = 17 (decimal) ********************************************************************** New DRBG octets: 08 3C 13 AD 40 5C C5 EA F1 90 58 08 0B DF C4 07 ********************************************************************** T_ID 5 - RTT AA candidates (128 bits): 08 3C 13 AD 40 5C C5 EA F1 90 58 08 0B DF C4 07 T_ID 5 - Initiator first 32-bit score: 10 T_ID 5 - Initiator second 32-bit score: 10 T_ID 5 - Initiator chosen PN pattern: 40 5C C5 EA T_ID 5 - Reflector first 32-bit score: 14 T_ID 5 - Reflector second 32-bit score: 26 T_ID 5 - Reflector chosen PN pattern: F1 90 58 08 T_ID 6 - SS marker position initiator (8 bits): EA - Range = 29 (decimal); hr1 = 26 (decimal) T_ID 6 - SS marker position reflector (8 bits): 82 - Range = 29 (decimal); hr1 = 14 (decimal) T_ID 7 - SS marker sig. sel. initiator (1 bits): 80 T_ID 7 - SS marker sig. sel. reflector (1 bits): 00 Step=17 | Mode=2 T_ID 2 - Submode insertion (8 bits): CA - Range = 5 (decimal); hr1 = 3 (decimal) T_ID 3 - TPM extension (2 bits): 80 T_ID 4 - Antenna path perm. (8 bits): B8 - Range = 24 (decimal); hr1 = 17 (decimal) Step=18 | Mode=2 T_ID 3 - TPM extension (2 bits): 40 ********************************************************************** New DRBG octets: B5 08 D4 4C 3C 86 DC C7 AF 58 4E 5B 8D 79 56 A9 ********************************************************************** T_ID 4 - Antenna path perm. (8 bits): B5 - Range = 24 (decimal); hr1 = 16 (decimal) Step=19 | Mode=2 T_ID 3 - TPM extension (2 bits): 80 T_ID 4 - Antenna path perm. (8 bits): 08 - Range = 24 (decimal); hr1 = 0 (decimal) Step=20 | Mode=2 T_ID 3 - TPM extension (2 bits): 00 T_ID 4 - Antenna path perm. (8 bits): D4 - Range = 24 (decimal); hr1 = 19 (decimal) Step=21 | Mode=2 T_ID 3 - TPM extension (2 bits): C0 T_ID 4 - Antenna path perm. (8 bits): 4C - Range = 24 (decimal); hr1 = 7 (decimal) Step=22 | Mode=0 ********************************************************************** New DRBG octets: DD A6 1F 35 5C 73 11 35 F4 26 10 C5 E1 4D C8 03 ********************************************************************** T_ID 5 - RTT AA candidates (128 bits): DD A6 1F 35 5C 73 11 35 F4 26 10 C5 E1 4D C8 03 T_ID 5 - Initiator first 32-bit score: 6 T_ID 5 - Initiator second 32-bit score: 18 T_ID 5 - Initiator chosen PN pattern: DD A6 1F 35 T_ID 5 - Reflector first 32-bit score: 4 T_ID 5 - Reflector second 32-bit score: 12 T_ID 5 - Reflector chosen PN pattern: F4 26 10 C5 Step=23 | Mode=0 ********************************************************************** New DRBG octets: 3B A5 CC 83 BE 04 2A 8A A4 80 0D F2 31 ED 01 6F ********************************************************************** T_ID 5 - RTT AA candidates (128 bits): 3B A5 CC 83 BE 04 2A 8A A4 80 0D F2 31 ED 01 6F T_ID 5 - Initiator first 32-bit score: 8 T_ID 5 - Initiator second 32-bit score: 22 T_ID 5 - Initiator chosen PN pattern: 3B A5 CC 83 T_ID 5 - Reflector first 32-bit score: 26 T_ID 5 - Reflector second 32-bit score: 12 T_ID 5 - Reflector chosen PN pattern: 31 ED 01 6F Step=24 | Mode=0 ********************************************************************** New DRBG octets: 62 EA 77 67 34 E0 8A D3 A8 AC E8 0E 31 C7 3C 5D ********************************************************************** T_ID 5 - RTT AA candidates (128 bits): 62 EA 77 67 34 E0 8A D3 A8 AC E8 0E 31 C7 3C 5D T_ID 5 - Initiator first 32-bit score: 12 T_ID 5 - Initiator second 32-bit score: 6 T_ID 5 - Initiator chosen PN pattern: 34 E0 8A D3 T_ID 5 - Reflector first 32-bit score: 16 T_ID 5 - Reflector second 32-bit score: 30 T_ID 5 - Reflector chosen PN pattern: A8 AC E8 0E Step=25 | Mode=3 T_ID 0 - non-mode0 channel (8bits): 82 - Range = 2 (decimal); hr1 = 1 (decimal) T_ID 0 - non-mode0 channel (8bits): FB - Range = 3 (decimal); hr1 = 2 (decimal) T_ID 0 - non-mode0 channel (8bits): F9 - Range = 4 (decimal); hr1 = 3 (decimal) T_ID 0 - non-mode0 channel (8bits): DA - Range = 5 (decimal); hr1 = 4 (decimal) T_ID 0 - non-mode0 channel (8bits): 15 - Range = 6 (decimal); hr1 = 0 (decimal) T_ID 0 - non-mode0 channel (8bits): 66 - Range = 7 (decimal); hr1 = 2 (decimal) T_ID 0 - non-mode0 channel (8bits): 58 - Range = 8 (decimal); hr1 = 2 (decimal) T_ID 0 - non-mode0 channel (16bits): 00 50 - Range = 9 (decimal); hr1 = 2 (decimal) T_ID 0 - non-mode0 channel (8bits): 86 - Range = 10 (decimal); hr1 = 5 (decimal) T_ID 0 - non-mode0 channel (8bits): 3A - Range = 11 (decimal); hr1 = 2 (decimal) T_ID 0 - non-mode0 channel (8bits): 4F - Range = 12 (decimal); hr1 = 3 (decimal) T_ID 0 - non-mode0 channel (8bits): 64 - Range = 13 (decimal); hr1 = 5 (decimal) T_ID 0 - non-mode0 channel (8bits): 66 - Range = 14 (decimal); hr1 = 5 (decimal) ********************************************************************** New DRBG octets: 6D 34 4D A5 C3 64 54 34 96 51 E5 B4 58 86 07 0E ********************************************************************** T_ID 0 - non-mode0 channel (8bits): 6D - Range = 15 (decimal); hr1 = 6 (decimal) T_ID 0 - non-mode0 channel (8bits): 34 - Range = 16 (decimal); hr1 = 3 (decimal) T_ID 0 - non-mode0 channel (8bits): 4D - Range = 17 (decimal); hr1 = 5 (decimal) T_ID 0 - non-mode0 channel (8bits): A5 - Range = 18 (decimal); hr1 = 11 (decimal) T_ID 0 - non-mode0 channel (8bits): C3 - Range = 19 (decimal); hr1 = 14 (decimal) T_ID 0 - Shuffled channels: 7 3 12 17 6 18 16 8 9 2 10 19 11 14 20 13 15 5 4 T_ID 3 - TPM extension (2 bits): 40 T_ID 4 - Antenna path perm. (8 bits): 3C - Range = 24 (decimal); hr1 = 5 (decimal) ********************************************************************** New DRBG octets: 84 97 9C FC 7B FA 84 EC CE 00 EB 40 2C 5D E0 0C ********************************************************************** T_ID 5 - RTT AA candidates (128 bits): 84 97 9C FC 7B FA 84 EC CE 00 EB 40 2C 5D E0 0C T_ID 5 - Initiator first 32-bit score: 10 T_ID 5 - Initiator second 32-bit score: 10 T_ID 5 - Initiator chosen PN pattern: 7B FA 84 EC T_ID 5 - Reflector first 32-bit score: 16 T_ID 5 - Reflector second 32-bit score: 10 T_ID 5 - Reflector chosen PN pattern: 2C 5D E0 0C T_ID 6 - SS marker position initiator (8 bits): 88 - Range = 29 (decimal); hr1 = 15 (decimal) T_ID 6 - SS marker position reflector (8 bits): 57 - Range = 29 (decimal); hr1 = 9 (decimal) T_ID 7 - SS marker sig. sel. initiator (1 bits): 80 T_ID 7 - SS marker sig. sel. reflector (1 bits): 80 Step=26 | Mode=2 T_ID 2 - Submode insertion (8 bits): 3E - Range = 5 (decimal); hr1 = 1 (decimal) T_ID 3 - TPM extension (2 bits): 40 T_ID 4 - Antenna path perm. (8 bits): 86 - Range = 24 (decimal); hr1 = 12 (decimal) Step=27 | Mode=2 T_ID 3 - TPM extension (2 bits): 80 T_ID 4 - Antenna path perm. (8 bits): DC - Range = 24 (decimal); hr1 = 20 (decimal) Step=28 | Mode=2 T_ID 3 - TPM extension (2 bits): 00 T_ID 4 - Antenna path perm. (8 bits): C7 - Range = 24 (decimal); hr1 = 18 (decimal) Step=29 | Mode=3 T_ID 3 - TPM extension (2 bits): 40 T_ID 4 - Antenna path perm. (8 bits): AF - Range = 24 (decimal); hr1 = 16 (decimal) ********************************************************************** New DRBG octets: E2 6C F2 67 2D 8A 75 9C 0D 0C 53 5D DB 18 15 83 ********************************************************************** T_ID 5 - RTT AA candidates (128 bits): E2 6C F2 67 2D 8A 75 9C 0D 0C 53 5D DB 18 15 83 T_ID 5 - Initiator first 32-bit score: 18 T_ID 5 - Initiator second 32-bit score: 14 T_ID 5 - Initiator chosen PN pattern: 2D 8A 75 9C T_ID 5 - Reflector first 32-bit score: 6 T_ID 5 - Reflector second 32-bit score: 6 T_ID 5 - Reflector chosen PN pattern: DB 18 15 83 T_ID 6 - SS marker position initiator (8 bits): 3B - Range = 29 (decimal); hr1 = 6 (decimal) T_ID 6 - SS marker position reflector (8 bits): D7 - Range = 29 (decimal); hr1 = 24 (decimal) T_ID 7 - SS marker sig. sel. initiator (1 bits): 00 T_ID 7 - SS marker sig. sel. reflector (1 bits): 00 Step=30 | Mode=2 T_ID 2 - Submode insertion (8 bits): A1 - Range = 5 (decimal); hr1 = 3 (decimal) T_ID 3 - TPM extension (2 bits): 80 T_ID 4 - Antenna path perm. (8 bits): 58 - Range = 24 (decimal); hr1 = 8 (decimal) Step=31 | Mode=2 T_ID 3 - TPM extension (2 bits): 40 T_ID 4 - Antenna path perm. (8 bits): 4E - Range = 24 (decimal); hr1 = 7 (decimal) Step=32 | Mode=2 T_ID 3 - TPM extension (2 bits): C0 T_ID 4 - Antenna path perm. (8 bits): 5B - Range = 24 (decimal); hr1 = 8 (decimal) Step=33 | Mode=2 T_ID 3 - TPM extension (2 bits): 80 T_ID 4 - Antenna path perm. (8 bits): 8D - Range = 24 (decimal); hr1 = 13 (decimal) Step=34 | Mode=2 T_ID 3 - TPM extension (2 bits): 80 T_ID 4 - Antenna path perm. (8 bits): 79 - Range = 24 (decimal); hr1 = 11 (decimal) Step=35 | Mode=3 T_ID 3 - TPM extension (2 bits): 00 T_ID 4 - Antenna path perm. (8 bits): 56 - Range = 24 (decimal); hr1 = 8 (decimal) ********************************************************************** New DRBG octets: 54 D5 4A 4F C8 3A 49 AF 6A A1 10 42 56 0B A5 AD ********************************************************************** T_ID 5 - RTT AA candidates (128 bits): 54 D5 4A 4F C8 3A 49 AF 6A A1 10 42 56 0B A5 AD T_ID 5 - Initiator first 32-bit score: 26 T_ID 5 - Initiator second 32-bit score: 10 T_ID 5 - Initiator chosen PN pattern: C8 3A 49 AF T_ID 5 - Reflector first 32-bit score: 16 T_ID 5 - Reflector second 32-bit score: 20 T_ID 5 - Reflector chosen PN pattern: 6A A1 10 42 T_ID 6 - SS marker position initiator (8 bits): 74 - Range = 29 (decimal); hr1 = 13 (decimal) T_ID 6 - SS marker position reflector (8 bits): 49 - Range = 29 (decimal); hr1 = 8 (decimal) T_ID 7 - SS marker sig. sel. initiator (1 bits): 80 T_ID 7 - SS marker sig. sel. reflector (1 bits): 80 Step=36 | Mode=2 T_ID 2 - Submode insertion (8 bits): E4 - Range = 5 (decimal); hr1 = 4 (decimal) T_ID 3 - TPM extension (2 bits): 00 T_ID 4 - Antenna path perm. (8 bits): A9 - Range = 24 (decimal); hr1 = 15 (decimal) Step=37 | Mode=2 T_ID 3 - TPM extension (2 bits): 00 ********************************************************************** New DRBG octets: EF B6 A1 07 43 B2 B9 66 0E DE 52 97 74 F0 33 84 ********************************************************************** T_ID 4 - Antenna path perm. (8 bits): EF - Range = 24 (decimal); hr1 = 22 (decimal) Step=38 | Mode=2 T_ID 3 - TPM extension (2 bits): 80 T_ID 4 - Antenna path perm. (8 bits): B6 - Range = 24 (decimal); hr1 = 17 (decimal) Step=39 | Mode=2 T_ID 3 - TPM extension (2 bits): 80 T_ID 4 - Antenna path perm. (8 bits): A1 - Range = 24 (decimal); hr1 = 15 (decimal) Step=40 | Mode=2 T_ID 3 - TPM extension (2 bits): 00 T_ID 4 - Antenna path perm. (8 bits): 07 - Range = 24 (decimal); hr1 = 0 (decimal) Step=41 | Mode=2 T_ID 3 - TPM extension (2 bits): 00 T_ID 4 - Antenna path perm. (8 bits): 43 - Range = 24 (decimal); hr1 = 6 (decimal) Step=42 | Mode=0 ********************************************************************** New DRBG octets: 78 68 87 E5 EE E6 7F 3E CC 7C C4 7E 5C 63 92 29 ********************************************************************** T_ID 5 - RTT AA candidates (128 bits): 78 68 87 E5 EE E6 7F 3E CC 7C C4 7E 5C 63 92 29 T_ID 5 - Initiator first 32-bit score: 10 T_ID 5 - Initiator second 32-bit score: 14 T_ID 5 - Initiator chosen PN pattern: 78 68 87 E5 T_ID 5 - Reflector first 32-bit score: 24 T_ID 5 - Reflector second 32-bit score: 16 T_ID 5 - Reflector chosen PN pattern: 5C 63 92 29 Step=43 | Mode=0 ********************************************************************** New DRBG octets: 9A D2 89 1B 16 E0 63 3F 65 19 BD BA 84 60 71 98 ********************************************************************** T_ID 5 - RTT AA candidates (128 bits): 9A D2 89 1B 16 E0 63 3F 65 19 BD BA 84 60 71 98 T_ID 5 - Initiator first 32-bit score: 20 T_ID 5 - Initiator second 32-bit score: 12 T_ID 5 - Initiator chosen PN pattern: 16 E0 63 3F T_ID 5 - Reflector first 32-bit score: 14 T_ID 5 - Reflector second 32-bit score: 26 T_ID 5 - Reflector chosen PN pattern: 65 19 BD BA Step=44 | Mode=0 ********************************************************************** New DRBG octets: D2 2D 15 56 BF 28 7E 3A 2D 6F C3 29 0D 51 E9 5B ********************************************************************** T_ID 5 - RTT AA candidates (128 bits): D2 2D 15 56 BF 28 7E 3A 2D 6F C3 29 0D 51 E9 5B T_ID 5 - Initiator first 32-bit score: 26 T_ID 5 - Initiator second 32-bit score: 16 T_ID 5 - Initiator chosen PN pattern: BF 28 7E 3A T_ID 5 - Reflector first 32-bit score: 8 T_ID 5 - Reflector second 32-bit score: 16 T_ID 5 - Reflector chosen PN pattern: 2D 6F C3 29 Step=45 | Mode=3 T_ID 3 - TPM extension (2 bits): 40 T_ID 4 - Antenna path perm. (8 bits): B2

Bluetooth Core Specification