Ericsson PF_KEY is a generic key management API that can be used with IPsec. This document discusses the extension of the PF_KEY interface in order to lessen the need to store complicated IPsec policy data in kernel- mode implementations, and to make it possible for key management dae- mons reuse traffic pattern information already present in the kernel.