Norm, I'm confused by your example, specifically "AH-DES-DES-DES." We don't use DES with AH; we use keyed hash functions, e.g., HMAC. AH does not offer encryption, ESP does. But, in the broader context of this discussion, I agree with Hilarie. Let's not make this even more complex than it already is. Steve