I've seen some vendor implementations in which ESP actually outperformed AH during performance testing... go figure...
Stefan Fouant
If I recall correctly what an implementor once told me, the work involved in taking the fields that are immutable, then hashing packet, then sticking those immutable fields back in is actually more work than encrypting. Surprised me at the time but seems to be the case.
- merike