i currently try to integrate it in last kernel, what i'll do is : a ipsec.o for kernel-secure (in /lib/modules/%{release}secure/crypto/) and a source in /usr/src/ to rebuild the driver easily for others kernel. All in the same package (kernel-ipsec or something like this) going to upload to the crypto sites. Is ok for you ? Regards. --Chmouel