Interoperability
================

.. Release Notes from this point.

.. _section-760-whatsfixed-SEC-2718:

:major:`[Major]` Lightweight Security Plugins did not use Additional Authenticated Data by default
--------------------------------------------------------------------------------------------------
The OMG DDS Security 1.2 specification mandates using Additional
Authenticated Data (AAD) to protect the integrity of the RTPS Header;
however, *Lightweight Security Plugins* used a different protection
method by default. This discrepancy could have prevented out-of-the-box
communication with other products implementing the DDS Security 1.2
PSK-only standard.

This release makes AAD the only mechanism protecting the integrity of
the RTPS Header in *Lightweight Security Plugins*. This protection
mechanism cannot be changed. In addition, support for the
``cryptography.enable_additional_authenticated_data`` property was
removed.

For more information, see `RTPS Protection <https://community.rti.com/static/documentation/connext-dds/7.6.0/doc/manuals/connext_dds_secure/users_manual/p2_core/cryptography.html#rtps-protection>`__
in the *RTI Security Plugins User's Manual*.

[RTI Issue ID SEC-2718]
