 Thus, the group key is also called a "key encrypting key" in GDOI.A group's key-encrypting key is used for the "Rekey Security Association".Once the "Rekey-SA" is established, the GDOI controller can send ("push") unsolicited updates to the group security association to members over multicast, broadcast or unicast channels.