5.2.9. Interoperability

5.2.9.1. [Major] Lightweight Security Plugins did not use Additional Authenticated Data by default

The OMG DDS Security 1.2 specification mandates using Additional Authenticated Data (AAD) to protect the integrity of the RTPS Header; however, Lightweight Security Plugins used a different protection method by default. This discrepancy could have prevented out-of-the-box communication with other products implementing the DDS Security 1.2 PSK-only standard.

This release makes AAD the only mechanism protecting the integrity of the RTPS Header in Lightweight Security Plugins. This protection mechanism cannot be changed. In addition, support for the cryptography.enable_additional_authenticated_data property was removed.

For more information, see RTPS Protection in the RTI Security Plugins User’s Manual.

[RTI Issue ID SEC-2718]