Mark, My understanding is that the mandatory to implement cipher algorithm, based on what the vendors are implementing and what they tested at the ANX interoperability workshop, is represented by the I-D draft-ietf-ipsec-ciph-des-expiv-00.txt. In other words, DES CBC with an explicit IV. - Ted