Linux-2.5 IPsec

Yet another IPsec by Alexey Kuznetsov and David S. Miller
generic SAD/SPD
pluggable algorithms using cryptoapi
KAME compatible KEY / Policy management model
flexible policy
transformation is stored in a list
XFRM rules (xfrm_policy) and state (xfrm_state)