Sequence integrity is provided by using a 16-bit sequence number which is incremented for each command. The sequence number is initialized with the least significant 16-bits of Ra. The server response will include the same sequence number as the client command. Figure 5 Housley, et al. At this point, files may be sent or received with encryption and integrity services in use.
Subsequent buffers contain only encrypted file octets.
All buffers are completely full except the final buffer. The next figure shows the header information and the file data. To prevent truncation and ensure file integrity, the token also includes a hash computed on the complete file. The token also contains the security label associate with the file. The first 24 octets of the token are the plaintext IV used to encrypt the remainder of the token.