Automatic generation and update of connectivity association keys for media access control security protocol

A first network device, comprising:

• one or more memories;
• and
• one or more processors to:
• process a first message from a second network device to determine encrypted key derivation function (KDF) input information;
• decrypt the encrypted KDF input information to determine at least one of one or more KDF input parameters that identifies a KDF and the one or more KDF input parameters;
• determine, based on determining at least one of the one or more KDF input parameters that identifies the KDF and the one or more KDF input parameters, a connectivity association key (CAK) for a Media Access Control Security (MACsec) session between the first network device and the second network device;
• determine, based on the CAK, a checksum value;
• and
• send, to the second network device, a second message that includes the checksum value.

A non-transitory computer-readable medium storing a set of instructions, the set of instructions comprising:

• one or more instructions that, when executed by one or more processors of a first network device, cause the first network device to:
• process a first message from a second network device to determine encrypted key derivation function (KDF) input information;
• decrypt the encrypted KDF input information to determine at least one of one or more KDF input parameters or KDF identification information that identifies a KDF and the one or more KDF input parameters;
• determine, based on determining at least one of the one or more KDF input parameters or the KDF identification information that identifies the KDF and the one or more KDF input parameters, a connectivity association key (CAK) for a Media Access Control Security (MACsec) session between the first network device and the second network device;
• determine, based on the CAK, a checksum value;
• and
• send, to the second network device, a second message that includes the checksum value.