Namespace SignedInterestPolicy

This rule assigns a random SigNonce of minNonceLength octets that does not duplicate last trackedNonces values.

This rule rejects an Interest on any of these conditions:

• SigNonce is absent.
• SigNonce has fewer than minNonceLength octets.
• SigNonce value duplicates any of last trackedNonces values.

This rule assigns SigSeqNum to initialSegNum, or increments from previous value.

This rule rejects an Interest on any of these conditions: (1) SigSeqNum is absent. (2) SigSeqNum value is less than or equal to a previous value.

This rule assigns SigTime to be same as current timestamp, but may increment if it duplicates the previous value.

This rule rejects an Interest on any of these conditions:

• SigTime is absent.
• SigTime differs from current timestamp by more than maxClockOffset milliseconds.
• SigTime value is less than or equal to a previous value.

This check logic differs from NDN Packet Format v0.3 specification (as of 2020-September) in that maxClockOffset is checked on every Interest rather than only the "initial" Interest. It is the same behavior as ndn-cxx v0.7.1 implementation. This logic offers better consistency as it has less dependency on internal state of the SignedInterestPolicy. However, persistently sending more than 1000 signed Interests per second would eventually push SigTime out of maxClockOffset range and cause rejections.