>One can easily send 16K packets in about the same amount of time that >rekeying takes with Diffie-Hellman. Is this a desirable balance? Uh, doesn't this kind of figure depend on the particular ratio of link speed to CPU speed? Phil