| policy | none | clear | clear or oe | oe or clear | oe or die | never | |||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| key? | no | yes | no | yes | no | yes | no | yes | no | yes | no | yes | |
| none | no | c | c | c | c | c | c | c | c | c,f | c,f | c,f | c,f | 
| yes | c | c | c | c | c | c | c,f? | c,f? | c,f | c,f | c,f | c,f | |
| clear | no | c | c | c | c | c | c | c | c,c(f?) | c,f | c,f | c,f | c,f | 
| yes | c | c | c | c | c | c | c,f? | c,f? | c,f | c,f | c,f | c,f | |
| clear or oe | no | c | c | c | c | c | c | c,f? | c,c(f?) | c,f | c,f | c,f | c,f | 
| yes | c | c | c | c | c | c | c,f? | c,e | c,f | c,e | c,f | c,f | |
| oe or clear | no | t,c | t,f? | t,c | t,f? | t,c | t,f? | t,f? | t,f? | t,f | t,f | t,f | t,f | 
| yes | t,c | t,f? | t,c | t,f? | t,c | t,e | t,c(f?) | t,e | t,f | t,e | t,f | t,f | |
| oe or die | no | t,f | t,f | t,f | t,f | t,f | t,f | t,f | t,f | t,f | t,f | t,f | t,f | 
| yes | t,f | t,f | t,f | t,f | t,f | t,e | t,f | t,e | t,f | t,e | t,f | t,f | |
| never | no | f | f | f | f | f | f | f | f | f | f | f | f | 
| yes | f | f | f | f | f | f | f | f | f | f | f | f | |
| legend | packet fate | 
|---|---|
| c | clear | 
| f | fail | 
| e | encrypt | 
| t | trap | 
| c,f | first packet clear, then fail | 
| c,e | first packet clear, then encrypt | 
| t,f | trap, then fail | 
| t,c | trap, then clear | 
| t,e | trap, then encrypt |