The "full" profile mandates both CRC-264 and a 264-bit CMAC (Cipher-Based Message Authentication Code) on every datagram. This dual-lock approach makes man-in-the-middle attacks computationally infeasible at current ASIC speeds.