| policy | none | clear | clear-or-private | private-or-clear | private | block | |||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| key? | no | yes | no | yes | no | yes | no | yes | no | yes | no | yes | |
| none | no | c | c | c | c | c | c | c | c | c,f | c,f | c,f | c,f | 
| yes | c | c | c | c | c | c | c,f? | c,f? | c,f | c,f | c,f | c,f | |
| clear | no | c | c | c | c | c | c | c | c,c(f?) | c,f | c,f | c,f | c,f | 
| yes | c | c | c | c | c | c | c,f? | c,f? | c,f | c,f | c,f | c,f | |
| clear-or-private | no | c | c | c | c | c | c | c,f? | c,c(f?) | c,f | c,f | c,f | c,f | 
| yes | c | c | c | c | c | c | c,f? | c,e | c,f | c,e | c,f | c,f | |
| private-or-clear | no | t,c | t,f? | t,c | t,f? | t,c | t,f? | t,f? | t,f? | t,f | t,f | t,f | t,f | 
| yes | t,c | t,f? | t,c | t,f? | t,c | t,e | t,c(f?) | t,e | t,f | t,e | t,f | t,f | |
| private | no | t,f | t,f | t,f | t,f | t,f | t,f | t,f | t,f | t,f | t,f | t,f | t,f | 
| yes | t,f | t,f | t,f | t,f | t,f | t,e | t,f | t,e | t,f | t,e | t,f | t,f | |
| block | no | f | f | f | f | f | f | f | f | f | f | f | f | 
| yes | f | f | f | f | f | f | f | f | f | f | f | f | |
| legend | packet fate | 
|---|---|
| c | clear | 
| f | fail | 
| e | encrypt | 
| t | trap | 
| c,f | first packet clear, then fail | 
| c,e | first packet clear, then encrypt | 
| t,f | trap, then fail | 
| t,c | trap, then clear | 
| t,e | trap, then encrypt |