Problems with Proposed IP Cryptography

Problems with Proposed IP Cryptography Several recent Internet Drafts make high-level architectural choices and specify low-level cryptographic mechanisms for Internet Protocol (IP) version 4 (IPv4) and IP version 6 (IPv6) security [A-arch, A-ah-arch, A-esp-arch, MS-ah-mech, MKS-esp-mech]. Here I critique cryptographic aspects of this work.