Authentication + Encryption

• Transport Adjacency

  • Use two bundled transport SAs
  • Inner being an ESP SA; outer being an AH SA
  • Authentication covers the ESP plus the original IP header
  • Advantage: authentication covers more fields, including source and destination IP addresses