NAS-PDU confusion

edit

Hi, I am analyzing a pcap file on 5g packets. Under the NAS-PDU (IN the initial registration request message), it shows both Security Protected NAS 5Gs Message Plain NAS 5Gs Message

I am a little confused.. Is the message encrypted or integrity protected? Or is it not?

Non-Access-Stratum 5GS (NAS)PDU

Security protected NAS 5GS message
    Extended protocol discriminator: 5G mobility management messages (126)
    0000 .... = Spare Half Octet: 0
    .... 0001 = Security header type: Integrity protected (1)
    Message authentication code: 0xd0b61b32
    Sequence number: 111
Plain NAS 5GS Message
    Extended protocol discriminator: 5G mobility management messages (126)
    0000 .... = Spare Half Octet: 0
    .... 0000 = Security header type: Plain NAS message, not security protected (0)
    Message type: Registration request (0x41)
    5GS registration type
    NAS key set identifier
        0... .... = Type of security context flag (TSC): Native security context (for KSIAMF)
        .001 .... = NAS key set identifier: 1
    5GS mobile identity
        Length: 11
        1... .... = Spare: 1
        .1.. .... = Spare: 1
        ..1. .... = Spare: 1
        ...1 .... = Spare: 1
        .... 0... = Spare: 0
        .... .010 = Type of identity: 5G-GUTI (2)
        Mobile Country Code (MCC): United States (310)
        Mobile Network Code (MNC): Unknown (999)
        AMF Region ID: 1
        0000 0000 10.. .... = AMF Set ID: 2
        ..00 0011 = AMF Pointer: 3
        5G-TMSI: 16777303 (0x01000057)
    UE security capability
        Element ID: 0x2e
        Length: 2
        1... .... = 5G-EA0: Supported
        .1.. .... = 128-5G-EA1: Supported
        ..1. .... = 128-5G-EA2: Supported
        ...1 .... = 128-5G-EA3: Supported
        .... 0... = 5G-EA4: Not supported
        .... .0.. = 5G-EA5: Not supported
        .... ..0. = 5G-EA6: Not supported
        .... ...0 = 5G-EA7: Not supported
        0... .... = 5G-IA0: Not supported
        .1.. .... = 128-5G-IA1: Supported
        ..1. .... = 128-5G-IA2: Supported
        ...1 .... = 128-5G-IA3: Supported
        .... 0... = 5G-IA4: Not supported
        .... .0.. = 5G-IA5: Not supported
        .... ..0. = 5G-IA6: Not supported
        .... ...0 = 5G-IA7: Not supported
    NAS message container
        Element ID: 0x71
        Length: 48
        Non-Access-Stratum 5GS (NAS)PDU
            **

Plain NAS 5GS Message

Thank you