Supported Standards and Use Cases

• MKA as defined in IEEE 802.1X-2020 Clauses 9–12; initially targeting unicast CA and small-scale deployments
• MACsec data plane is delegated to the Linux kernel macsec module (ip macsec / driver)

MVP Scope

• Pre-shared CAK/CKN (PSK) only; no EAP integration
• Point-to-point and small-scale multi-peer topologies only; complex multicast optimizations are out of scope
• Default cipher suite (GCM-AES-128); XPN is not supported initially

Explicitly Out of Scope (Deferred)

• Full 802.1X Authenticator/Supplicant implementation; only MKA is implemented
• Custom MACsec data plane; relies on ip macsec / driver via system calls