Authentication using ESP in Transport Mode

[[e-mail]]

     The latest Security Architecture for IP draft (4 June 96) changes the
     role of ESP from confidentiality only to confidentiality +
     authentication.  But, ESP in Transport Mode does not operate on the
     cleartext IP header.  So I still need to apply AH after ESP to provide
     end-to-end authentication of IP headers.  It is desirable to tweak the
     architecture so that authentication provided by ESP has the same
     security as authentication provided by AH. Then only a single security
     header is needed for end-to-end confidentiality + authentication.
     
     Steve
     
     =====================================================================
     Steve Rodney                       E-mail: [e-mail]
     Racal-Datacom
     1601 N. Harrison Parkway           Phone:  [phone]
     Sunrise, Florida 33323-6836        Fax:    [phone]
     =====================================================================