The ESP header provides origin authentication, integrity and optional privacy of the data portion only. Normally, this privacy option is provided by encryption, but the specification permits a ``null'' encryption to be used in some circumstances.