>>> This is assuming there's still a consensus to move towards a
>>> continuation-passing crypto framework for IPsec in general (which is a
>>> pre-requisite for taking advantage of crypto accelerator cards) and to
>>> Fast-IPsec (finishing adding Ipv6) in particular.
>> I think that's a good direction to move.

	Sam's code re-injects ESP-decoded packet (and others) to ipintrq,
	just like openbsd (Sam commented that he wouldn't do it but from
	freebsd code, he did).  it causes a big problem on transport mode case.

itojun