Dan, The ESP spec also calls for a 96-bit truncated hash, just for consistency with AH. The same sort of alignment concerns montiavte it, though not so strongly as in the case of AH, as you noted. Steve