 RFC 2627 and other algorithms such as "subset-difference" are logarithmic in space, time and message complexity.Thus, RFC 2627 supports efficient group "membership management" for GDOI.In a practical implementation, GDOI group membership management is a separate function that the controller or a AAA function invokes to remove a de-authorized group member.