I want to know which parts of the data frame is encrypted using API specific structure. I know the payload is but I want to know which isn’t.
What do you mean by your question? If you are using Encryption on the Xtend, then only the data payload is encrypted. The destination and source addressing functions are not.
Is the length and check sum also excluded in the encryption?
No, it is not.