Ran, The protocol ID space is fairly small under IPv4, so I don't know if Jon will be willing to issue two IDs for this protocol. Having optional header fields to accommodate confidentiality vs. integrity/authenticity seems more reasonable. Steve