> What you're suggesting is rekeying every packet. Not at all. If the "key hash index" doesn't change, then the key doesn't change. You can keep a small (2 or 3) table of most recently used derived keys to avoid having to recompute. Hilarie