March 5, 2002
Practical Aspects of Modern Cryptography
47
IPSEC AH in Tunnel Mode
Data
TCP Hdr
Orig IP Hdr
Integrity hash coverage (except for mutable new IP hdr fields)
IP Hdr
  AH Hdr
Data
TCP Hdr
Orig IP Hdr
New IP header with source & destination IP address