4.2. Command Class Definitions

The following subchapters contain definitions of Transport-Encapsulation Command Classes.

Table of Contents

• 4.2.1. CRC-16 Encapsulation Command Class, version 1
  • 4.2.1.1. Compatibility Considerations
    • 4.2.1.1.1. Node Information Frame (NIF)
    • 4.2.1.1.2. Control and support
  • 4.2.1.2. CRC-16 Encapsulated Command
• 4.2.2. Multi Channel Command Class, version 3
  • 4.2.2.1. Compatibility Considerations
    • 4.2.2.1.1. Node information Frame (NIF)
    • 4.2.2.1.2. Dynamic End Point considerations
  • 4.2.2.2. Interoperability considerations
  • 4.2.2.3. Multi Channel End Point Get Command
  • 4.2.2.4. Multi Channel End Point Report Command
  • 4.2.2.5. Multi Channel Capability Get Command
  • 4.2.2.6. Multi Channel Capability Report Command
  • 4.2.2.7. Multi Channel End Point Find Command
  • 4.2.2.8. Multi Channel End Point Find Report Command
  • 4.2.2.9. Multi Channel Command Encapsulation
• 4.2.3. Multi Channel Command Class, version 4
  • 4.2.3.1. Compatibility Considerations
  • 4.2.3.2. Interoperability Considerations
    • 4.2.3.2.1. Aggregated End Point design principles
    • 4.2.3.2.2. Dynamic End Point considerations
  • 4.2.3.3. Multi Channel End Point Report Command
  • 4.2.3.4. Multi Channel Capability Get/Report Commands
  • 4.2.3.5. Multi Channel Capability Find Report Commands
  • 4.2.3.6. Multi Channel Aggregated Members Get Command
  • 4.2.3.7. Multi Channel Aggregated Members Report Command
• 4.2.4. Multi Command Command Class, version 1
  • 4.2.4.1. Interoperability considerations
  • 4.2.4.2. Compatibility considerations
    • 4.2.4.2.1. Multi Command Support
    • 4.2.4.2.2. Multi Command Control
    • 4.2.4.2.3. Node Information Frame (NIF)
  • 4.2.4.3. Multi Command Encapsulated Command
• 4.2.5. Security 0 (S0) Command Class, version 1
  • 4.2.5.1. Compatibility considerations
    • 4.2.5.1.1. Node Information Frame (NIF)
  • 4.2.5.2. Message Encapsulation and Command Class Handling
    • 4.2.5.2.1. Nonce Get Command
    • 4.2.5.2.2. Nonce Report Command
    • 4.2.5.2.3. Security Message Encapsulation Command
  • 4.2.5.3. Network Key Management
    • 4.2.5.3.1. Network inclusion
      • 4.2.5.3.1.1. Inclusion through Non-Secure Inclusion controller
      • 4.2.5.3.1.2. Inclusion Timers
    • 4.2.5.3.2. Security Scheme Get Command
    • 4.2.5.3.3. Security Scheme Report Command
    • 4.2.5.3.4. Network Key Set Command
    • 4.2.5.3.5. Network Key Verify Command
    • 4.2.5.3.6. Security Scheme Inherit Command
  • 4.2.5.4. Encapsulated Command Class Handling
    • 4.2.5.4.1. Multi Channel Handling
    • 4.2.5.4.2. Security Commands Supported Get Command
    • 4.2.5.4.3. Security Commands Supported Report Command
• 4.2.6. Security 2 (S2) Command Class, version 1
  • 4.2.6.1. Compatibility Considerations
    • 4.2.6.1.1. Command Class dependencies
    • 4.2.6.1.2. Node Information Frame (NIF)
    • 4.2.6.1.3. Mixed Security Classes
    • 4.2.6.1.4. Migration of existing devices to the Security 2 Command Class
  • 4.2.6.2. Security Considerations
    • 4.2.6.2.1. Application enabled delivery confirmation
    • 4.2.6.2.2. Potential Singlecast Delay Attack via interception and jamming
    • 4.2.6.2.3. Potential Multicast Delay Attack
    • 4.2.6.2.4. Circumventing DSK authentication
      • 4.2.6.2.4.1. Controller-side authentication
      • 4.2.6.2.4.2. Client-side authentication
      • 4.2.6.2.4.3. Protecting keys from physical extraction
  • 4.2.6.3. Interoperability Considerations
    • 4.2.6.3.1. Pragmatic Decryption calculations in constrained environments
  • 4.2.6.4. Building Blocks
    • 4.2.6.4.1. ECDH Key pair generation
    • 4.2.6.4.2. Key exchange overview
    • 4.2.6.4.3. Core AES (AES)
    • 4.2.6.4.4. AES-128 CCM Encryption and Authentication
    • 4.2.6.4.5. CCM profile
      • 4.2.6.4.5.1. Additional Authenticated Data (AAD)
    • 4.2.6.4.6. Message Authentication Code - AES-128 CMAC
    • 4.2.6.4.7. Pseudo Random Number Generator (PRNG)
    • 4.2.6.4.8. Key extraction and derivation
      • 4.2.6.4.8.1. CKDF-TempExtract
      • 4.2.6.4.8.2. CKDF-TempExpand
      • 4.2.6.4.8.3. Permanent Key Exchange
      • 4.2.6.4.8.4. Key Derivation
    • 4.2.6.4.9. Nonces for CCM
    • 4.2.6.4.10. SPAN NextNonce Generator
      • 4.2.6.4.10.1. SPAN Instantiation
        • 4.2.6.4.10.1.1. Mixing
      • 4.2.6.4.10.2. Generation
        • 4.2.6.4.10.2.1. NextNonce
    • 4.2.6.4.11. MPAN NextNonce Generator
      • 4.2.6.4.11.1. MPAN Generation
  • 4.2.6.5. Message Encapsulation
    • 4.2.6.5.1. Singlecast messages and SPAN Management
      • 4.2.6.5.1.1. SPAN Table
    • 4.2.6.5.2. Multicast messages and MPAN Management
      • 4.2.6.5.2.1. MPAN table
      • 4.2.6.5.2.2. Adding an S2 Multicast group member
      • 4.2.6.5.2.3. Removing an S2 Multicast group member
      • 4.2.6.5.2.4. Handling a missing S2 Multicast frame
    • 4.2.6.5.3. Message encapsulation commands
      • 4.2.6.5.3.1. Security 2 Nonce Get Command
      • 4.2.6.5.3.2. Security 2 Nonce Report Command
      • 4.2.6.5.3.3. Security 2 Message Encapsulation Command
        • 4.2.6.5.3.3.1. Valid Extensions and Encrypted Extensions
    • 4.2.6.5.4. Duplicate Message Detection
  • 4.2.6.6. Key Management
    • 4.2.6.6.1. Key Exchange
    • 4.2.6.6.2. ECDH key pairs, Device Specific Key and User Verification
    • 4.2.6.6.3. Client-Side Authentication
    • 4.2.6.6.4. Initial Key Exchange
      • 4.2.6.6.4.1. Security 2 bootstrapping Interrupt Points
      • 4.2.6.6.4.2. Security 2 bootstrapping Timeouts
  • 4.2.6.7. Security 2 Key Exchange commands
    • 4.2.6.7.1. Security 2 KEX Get Command
    • 4.2.6.7.2. Security 2 KEX Report Command
    • 4.2.6.7.3. Security 2 KEX Set Command
    • 4.2.6.7.4. Security 2 KEX Fail Command
    • 4.2.6.7.5. Security 2 Public Key Report Command
    • 4.2.6.7.6. Security 2 Network Key Get Command
    • 4.2.6.7.7. Security 2 Network Key Report Command
    • 4.2.6.7.8. Security 2 Network Key Verify Command
    • 4.2.6.7.9. Security 2 Transfer End Command
  • 4.2.6.8. Discovery of Security Capabilities Commands
    • 4.2.6.8.1. Security 2 Commands Supported Get Command
    • 4.2.6.8.2. Security 2 Commands Supported Report Command
• 4.2.7. Security 2 (S2) Command Class, version 2
  • 4.2.7.1. Network Layer Security (NLS) Introduction
  • 4.2.7.2. Compatibility considerations
  • 4.2.7.3. Security considerations
  • 4.2.7.4. Interoperability considerations
  • 4.2.7.5. Commands covered by NLS
    • 4.2.7.5.1. Z-Wave Network Layer commands ALWAYS covered by NLS
    • 4.2.7.5.2. Z-Wave Network Layer commands covered by NLS after secure bootstrapping
    • 4.2.7.5.3. Z-Wave Network Layer commands NOT covered by NLS
    • 4.2.7.5.4. Z-Wave Network Layer commands NEVER covered by NLS
    • 4.2.7.5.5. Z-Wave Long Range Network Layer commands NOT covered by NLS
    • 4.2.7.5.6. Z-Wave Long Range Network Layer commands NEVER covered by NLS
  • 4.2.7.6. KEX Report Command
  • 4.2.7.7. NLS Node List Get Command
  • 4.2.7.8. NLS Node List Report Command
  • 4.2.7.9. NLS State Get Command
  • 4.2.7.10. NLS State Report Command
  • 4.2.7.11. NLS State Set Command
• 4.2.8. Supervision Command Class, version 1
  • 4.2.8.1. Terminology
  • 4.2.8.2. Compatibility Considerations
    • 4.2.8.2.1. Node Information Frame (NIF)
    • 4.2.8.2.2. Encapsulated Commands
  • 4.2.8.3. Supervision Get Command
  • 4.2.8.4. Supervision Report Command
  • 4.2.8.5. Examples and use-cases
    • 4.2.8.5.1. Set Type commands
    • 4.2.8.5.2. Powerlevel Test Node Set Command
    • 4.2.8.5.3. Report/Notification Type Commands
    • 4.2.8.5.4. Remove Type commands
• 4.2.9. Supervision Command Class, version 2
  • 4.2.9.1. Compatibility considerations
  • 4.2.9.2. Supervision Report Command
    • 4.2.9.2.1. Wake up on Demand functionality
• 4.2.10. Transport Service Command Class, version 1
• 4.2.11. Transport Service Command Class, version 2
  • 4.2.11.1. Compatibility considerations
    • 4.2.11.1.1. Node Information Frame (NIF)
  • 4.2.11.2. Example Frame flows
    • 4.2.11.2.1. As things should always work - the default case
    • 4.2.11.2.2. Losing first segment of a long message
    • 4.2.11.2.3. Losing subsequent segment
    • 4.2.11.2.4. Losing last segment
    • 4.2.11.2.5. Losing SegmentComplete