Thanks for this most recent update. I'm still not convinced of the goodness of suites in general, but if the WG insists, I have to fall in with Michael that you should cordon off sections for IKE, AH, and ESP. Also, what happened to HMAC-MD5?!? I know people have some issues with MD5, but the HMAC transformation is supposed to address most of that, no? Dan