A little bit off-topic perhaps, but I'd like to congratulate you all on an extremely useable piece of software! When I decicided to make a light-weight IPsec tunnel implementation some time ago I decided very early on to use your CryptoAPI, and found it really easy to use. I now have a version of my IPsec tunnel implementation that seems to work just fine, and I think it's time to let you guys have a peek at it. You can find the code and a first stab at actual documentation at http://ringstrom.mine.nu/ipsec_tunnel/ Please remeber that this is an early version, and I do not guarantee anything. It does seem to interoperate with OpenBSD's IPsec though, and I have been using it for several weeks myself. And yes, I've heard about FreeS/WAN... :-) I'm interested in any comments or questions! /Tobias - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/