RE: hardware DES cracker Cool! I can update the IPSEC DOI in, say, one minute... We will want to update IKE as well and mandate the second Oakley MODP group. I believe that Hillary has some additional concerns even about the strength of that group for generating full 3DES keys... Derrell