Aspects present herein relate to methods and devices for wireless communication including an apparatus, e.g., a UE and/or a base station. The apparatus may receive, from a base station, a security mode command message associated with secure sidelink communication with at least one other UE. The apparatus may also identify, based on the security mode command message, at least one of a RRC encryption key or a user plane encryption key. Additionally, the apparatus may receive, from the base station, an indication of at least one of a common base key or the RRC encryption key. The apparatus may also identify a physical layer sidelink encryption key based on at least one of the common base key or the RRC encryption key, the physical layer sidelink encryption key being associated with the secure sidelink communication with the at least one other UE.