Abstract: This disclosure describes techniques and mechanisms for providing initialization vector (IV) uniqueness and extending rekeying windows for network devices that perform secure association sharing in multi-source and multi-destination environments. The techniques may apply to existing hardware of the network devices. The techniques may enable the network devices to execute in a non-XPN mode and establish secure tunnels corresponding to secure association sessions. The techniques may utilize software to partition extra bits included in packet headers. The network devices may perform a process to update a loop count value utilizing a portion of the extra bits, thereby exponentially extending the rekeying windows. Further, by utilizing a portion of the extra bits, the system may ensure IV uniqueness for the secure association session between network devices in the multi-source and multi-destination environment.

Abstract: In an embodiment, a method includes receiving a data packet and generating an optimized security tag based on a standard security tag by replacing an 8-byte optional secure channel identifier (SCI) of the standard security tag with 32 most significant bits of a 4 packet number, a 2-byte MAC Security Entities (SecY) engine identifier, and a 2-byte short SCI. The method further includes encrypting the data packet and transmitting the encrypted data packet comprising the optimized security tag to an electronic device.

Abstract: In an embodiment, a method includes receiving a data packet and generating an optimized security tag based on a standard security tag by replacing an 8-byte optional secure channel identifier (SCI) of the standard security tag with 32 most significant bits of a 4 packet number, a 2-byte MAC Security Entities (SecY) engine identifier, and a 2-byte short SCI. The method further includes encrypting the data packet and transmitting the encrypted data packet comprising the optimized security tag to an electronic device.

Abstract: Techniques described herein can allocate respective unique secure channel identifiers (SCIs) to respective uplink encryptor interfaces which provide intersite connectivity over multipathing internet protocol (IP) networks between a first data center site and a second data center site. A respective uplink encryptor interface can then use the unique SCI allocated thereto, along with a packet number counter value to encrypt and generate an integrity check value for at least a portion of a packet. The encryption can comprise using the SCI and the packet number counter value to generate a unique packet initialization vector for the packet, which is then used to encrypt and integrity protect the packet. The respective uplink encryptor interface can send the encrypted packet via a tunnel to a second data center site via a secure communication channel spanning across multiple encryptors and multiple decryptors.

Abstract: In an embodiment, a method includes receiving a data packet and generating an optimized security tag based on a standard security tag by replacing an 8-byte optional secure channel identifier (SCI) of the standard security tag with 32 most significant bits of a 4 packet number, a 2-byte MAC Security Entities (SecY) engine identifier, and a 2-byte short SCI. The method further includes encrypting the data packet and transmitting the encrypted data packet comprising the optimized security tag to an electronic device.

Abstract: A ratchet wrench assembly is provided that includes a head, a ratchet gear, a yoke, one or more drive pins, a body, and a ratchet pawl. The body may include one or more drive edges and a fastener drive member. A first drive edge may be engaged with a first drive pin such that reciprocation of the yoke causes rotation of the body and the fastener drive member about the axis of rotation via engagement of the first drive pin between the inner surface of the yoke ring and the first drive edge. The ratchet pawl may include a first ratchet tooth configured ratchet against gear teeth of the ratchet gear to permit movement of the body relative to the head in a first rotational direction and engage the gear teeth to prevent movement of the body relative to the head in second, opposite rotational direction.

Abstract: In some implementations, the disclosed systems and methods can include one or more tinting elements (e.g., flip-down blacked-out lenses, a blacked-out slider, or a blacked-out removeable cover) configured to cover the lenses of the MR glasses. In some implementations, the disclosed systems and methods can be coupled to one or more micro electrical motors configured to drive the clear fluid into and out of the pairs of clear flexible membranes, in order to make the focus tunable lenses concave to correct myopia, or convex to correct hyperopia or presbyopia. In some implementations, the disclosed systems and methods can be directed to online calibration of headset proximity sensors to mitigate after factory sensor drift and prevent automatic OFF and ON system failures.

Abstract: Provided is a T-cell receptor (TCR) that can bind to a KWVESIFLIF (SEQ ID NO: 38)-HLA A2402 complex, wherein the binding affinity thereof is at least 2 times that of a wild-type TCR. Further provided is a fusion molecule of the TCR with a therapeutic agent, which fusion molecule targets a tumor cell presenting the KWVESIFLIF (SEQ ID NO: 38)-HLA A2402 complex.

Abstract: A ratchet wrench assembly (10) is provided that includes a head (12), a ratchet gear (130), a yolk (100), one or more drive pins (122,120), a body (80), and a ratchet pawl (140). The body (80) may include one or more drive edges (84) and a fastener drive member (20). A first drive edge (84) may be engaged with a first drive pin (122) such that reciprocation of the yolk (100) causes rotation of the body (80) and the fastener drive member (20) about the axis of rotation via engagement of the first drive pin (122) between the inner surface of the yolk ring (102) and the first drive edge (84). The ratchet pawl (140) may include a first ratchet tooth (144) configured ratchet against gear teeth (132) of the ratchet gear (130) to permit movement of the body (80) relative to the head (12) in a first rotational direction and engage the gear teeth (132) to prevent movement of the body (80) relative to the head (12) in second, opposite rotational direction.

Abstract: Aspects of the embodiments include receiving a packet at a network element of a packet-switched network; identifying a presence of a shared service destination address in a header of the packet; identifying a shared service destination address for the packet based, at least in part, on a destination internet protocol (IP) address stored in a forward information base; and forwarding the packet to the shared service destination address.

Abstract: A novel vehicle with a 180-degree field of view of a main driver, wherein front and rear window frames of an integrated main window frame and two side window frames of a main window are adapted in shape and connected to form the integrated main window frame; an integrated main window windshield, made by adjusting the shape, specification and size of the main window windshield until no light reflection or refraction is produced according to the shape, specification and structure of the integrated main window frame, is installed in the integrated main window frame, forming an integrated main window with a 180-degree field of view of the main driver; and guaranteeing that drivers in the main driver position and the co-driver position conveniently enter and exit the left and right front door openings, however, the minimum width of the door openings is 0.5 meters or more.

Abstract: Aspects of the embodiments include receiving a packet at a network element of a packet-switched network; identifying a presence of a shared service destination address in a header of the packet; identifying a shared service destination address for the packet based, at least in part, on a destination internet protocol (IP) address stored in a forward information base; and forwarding the packet to the shared service destination address.

Abstract: Aspects of the embodiments include receiving a packet at a network element of a packet-switched network; identifying a presence of a shared service destination address in a header of the packet; identifying a shared service destination address for the packet based, at least in part, on a destination internet protocol (IP) address stored in a forward information base; and forwarding the packet to the shared service destination address.

Abstract: Presented herein are techniques for performing packet forwarding or routing using a pipeline of a plurality of tiles. A method includes receiving a packet, parsing the packet to generate a vector, passing the vector to a first tile dedicated to a first type of lookup, performing a lookup in the first tile, storing a result of the first type of lookup in the vector to obtain a first updated vector, passing the first updated vector to a second tile dedicated to a second type of lookup, performing a lookup in the second tile, storing a result of the second type of lookup in the vector to obtain a second updated vector, and transmitting the packet from the network routing device via an output port thereof selected based on the second updated vector.

Abstract: Presented herein are techniques for performing packet forwarding or routing using a pipeline of a plurality of tiles. A method includes receiving a packet, parsing the packet to generate a vector, passing the vector to a first tile dedicated to a first type of lookup, performing a lookup in the first tile, storing a result of the first type of lookup in the vector to obtain a first updated vector, passing the first updated vector to a second tile dedicated to a second type of lookup, performing a lookup in the second tile, storing a result of the second type of lookup in the vector to obtain a second updated vector, and transmitting the packet from the network routing device via an output port thereof selected based on the second updated vector.

Abstract: According to one aspect, a method includes determining whether at least one memory storage unit in a first stage of a multi-stage array is available for use by a first counter associated with the first stage, and allocating the at least one memory storage unit for use by the first counter when the at least one memory storage unit is available. When the at least one memory storage unit is not available for use by the first counter, the method includes identifying a second counter stored in a first location in the first stage, the first location including a first memory storage unit and a second memory storage unit, and moving the second counter to a second stage of the multi-stage array, storing a pointer to the second stage in the first memory storage unit, and allocating the second memory storage unit to the first counter.