> I thought people were generating the IV once at the initialization of the > S-A but I realize that could be wrong. my understanding is that, for best security, the IV should be different for each packet. - Bill