Security Associations

# Description

The managed cryptographic context that binds one sending endpoint to one receiving endpoint for a single direction of traffic, holding the keys, algorithm choices, and sequence state a secured data-link session runs under. Because each association is one-way and stateful, protected uplink and protected downlink are governed by separate associations rather than a shared session.