Universal vs. Universal crypto - the latter adds the ability to activate "strong crypto" e.g certain security features such as ssh, https, IPsec etc.plus MACsec - an end to end encryption at the MAC layer recently introduced. Also known as IEEE 802.1ae.

The differentiation is that certan proscribed countires (North Korea, etc.) are prohibited by US law to import the images with strong crypto.

Universal No MACSEC image includes the universal crypto features EXCEPT not the MACsec bits.