From abba9293800de056022d333d9c79dd43c5be9c56 Mon Sep 17 00:00:00 2001
From: tengyiG <108433002+tengyiG@users.noreply.github.com>
Date: Tue, 27 Aug 2024 14:32:47 -0700
Subject: [PATCH] Update openconfig-keychain-types.yang (#1173)

---
 .../keychain/openconfig-keychain-types.yang   | 26 ++++++++++++++++++-
 1 file changed, 25 insertions(+), 1 deletion(-)

diff --git a/release/models/keychain/openconfig-keychain-types.yang b/release/models/keychain/openconfig-keychain-types.yang
index d84b1f54c..c923f9ea1 100644
--- a/release/models/keychain/openconfig-keychain-types.yang
+++ b/release/models/keychain/openconfig-keychain-types.yang
@@ -21,7 +21,13 @@ module openconfig-keychain-types {
     "This module contains general data definitions for use in
     keychain-based authentication.";
 
-  oc-ext:openconfig-version "0.2.0";
+  oc-ext:openconfig-version "0.3.0";
+
+  revision "2024-08-27" {
+    description
+      "Added AES_128_CMAC and AES_256_CMAC";
+    reference "0.3.0";
+  }
 
   revision "2022-03-01" {
     description
@@ -137,4 +143,22 @@ module openconfig-keychain-types {
       reference
         "RFC 4494 - The AES-CMAC-96 Algorithm and Its Use with IPsec";
   }
+
+  identity AES_128_CMAC {
+    base CRYPTO_TYPE;
+      description
+        "AES-128-CMAC keyed hash function based on a AES-128 block
+        cipher.";
+      reference
+        "RFC 4493 - The AES-CMAC Algorithm and Its Use with IPsec";
+  }
+
+  identity AES_256_CMAC {
+    base CRYPTO_TYPE;
+      description
+        "AES-256-CMAC keyed hash function based on a AES-256 block
+        cipher.";
+      reference
+        "RFC 4493 - The AES-CMAC Algorithm and Its Use with IPsec";
+  }
 }