 Furthermore, since the keys are communicated in the packets themselves, there is no need to incur the overhead and complexity of a pseudo-session layer underneath IP.Figure B-5 shows an encrypted IP packet, using the two-step encryption procedure described above.Figure B-5 Encrypted Packet

When a node receives this encrypted packet, it looks up the sender's certificate.