From owner-freebsd-hackers  Tue Aug 20 08:10:28 1996
Return-Path: owner-hackers
Received: (from root@localhost)
          by freefall.freebsd.org (8.7.5/8.7.3) id IAA05076
          for hackers-outgoing; Tue, 20 Aug 1996 08:10:28 -0700 (PDT)
Received: from gvr.win.tue.nl (root@gvr.win.tue.nl [131.155.210.19])
          by freefall.freebsd.org (8.7.5/8.7.3) with SMTP id IAA05069
          for <hackers@freebsd.org>; Tue, 20 Aug 1996 08:10:22 -0700 (PDT)
Received: by gvr.win.tue.nl (8.6.13/1.53)
    id RAA14917; Tue, 20 Aug 1996 17:09:49 +0200
From: guido@gvr.win.tue.nl (Guido van Rooij)
Message-Id: <199608201509.RAA14917@gvr.win.tue.nl>
Subject: Re: DIVERT
To: avalon@coombs.anu.edu.au (Darren Reed)
Date: Tue, 20 Aug 1996 17:09:48 +0200 (MET DST)
Cc: archie@whistle.com, hackers@freebsd.org
In-Reply-To: <199608180140.SAA05233@freefall.freebsd.org> from Darren Reed at "Aug 18, 96 11:39:59 am"
X-Mailer: ELM [version 2.4ME+ PL17 (25)]
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Sender: owner-hackers@freebsd.org
X-Loop: FreeBSD.org
Precedence: bulk

> 
> You should be aware of the NRL project to do IPsec (for NetBSD) as well
> as ENskip (SKIP compatible code, written in Switzerland, also for NetBSD).
> I suspect that there are a number of requirements in the various encryption
> protocols for IP which will make kernel bloat (either via LKM's or direct)
> inevitable.  I don't imagine either of those would be too hard to port to
> FreeBSD.
> 

Enskip is pretty simple. I once did it to check it out. 

-Guido