 The IKE/GDOI Phase 1 cryptographic protocol exchange protects a new type of Phase 2 exchange in which the member requests ("pulls") group state from the controller.The "group key" is the most important state in a GDOI member.The group key encrypts keys that decrypt application data.