[e2e] How TCP might look with always there ESP

[Douglas Otis]

Craig,

For which cases would ESP digests appear weaker than a 16 bit TCP checksum?

Doug

 
> >First we would drop the CRC checksum.  All of the ESP auth 
> methods are much 
> >stronger.
> 
> Addendum to my last note (kudos to Hilarie here).  Because all the ESP
> auth methods have far more bits in their sum, they're (but for certain
> presumably rare cases) stronger than the 16 bit TCP checksum.
> 
> Craig
>