What is included in the protection of the ICV (Integrity Check Value)?
“The ICV value is computed over all PTP message fields beginning with the first octet of the common header and ending with and including the last octet of the security AUTHENTICATION TLV.” (Annex K, p.244 of IEEE 1588 standard) This calculation does not include the network adresses required by the security association lookup. For more information on this topic check the article Security Flaws and Workarounds for IEEE 1588 (Transparent) Clocks” from ISPCS 2009.
