Re: [IPsec] IV in ESP packets for AES-CBC and AES-CTR methods

[Paul Koning <Paul_Koning at dell.com>]

>>>>> "ss" == ss murthy nittala <ssmurthy.nittala at freescale.com> writes:

 ss> The following sentence present in RFC 3602 creates some doubts
 ss> whether IV in each packet is mandatory or not?

 ss> "Including the IV in each datagram ensures that decryption of
 ss> each received datagram can be performed, even when some datagrams
 ss> are dropped, or datagrams are re-ordered in transit."

It's mandatory.  The paragraph you quoted is simply an explanation of
why this is so.

Note the first paragraph of that section, which says "the ESP payload
is made up of the IV followed...".  There isn't any option in that
statement. 

	   paul