Which comes first?

Ben Rogers <ben@Ascend.COM> Mon, 15 September 1997 11:30 UTC

Received: (from majordom@localhost) by portal.ex.tis.com (8.8.2/8.8.2) id HAA25565 for ipsec-outgoing; Mon, 15 Sep 1997 07:30:11 -0400 (EDT)
Date: Mon, 15 Sep 1997 02:41:43 -0400
Message-Id: <199709150641.CAA05540@carp.morningstar.com>
From: Ben Rogers <ben@Ascend.COM>
To: ipsec@tis.com, isakmp-oakley@cisco.com
Subject: Which comes first?
Reply-To: ben@Ascend.COM
Sender: owner-ipsec@ex.tis.com
Precedence: bulk

When I negotiate an ESP SA with DES encryption and an MD5 HMAC, I
obviously need 64 + 128 = 196 bits of keying material from Oakley.  I
can't seem to find a reference as to which 64 bits are used for the DES
key and which for the MD5 key.

Can anyone give me a pointer?