[IPsec] Can selected IPv6 Headers be part of Authenticated Data with ESP-GCM?

[Robert Moskowitz]

I have an interesting use case for a new IPv6 header that MAY be secure 
within the ESP payload, or MAY be exposed for inroute processing, but 
MUST be protected (authenticated data).

My cursory review is not showing this is currently supported.
Is it, our would I need to define a variant of the AES-GCM mode?

Thanks


_______________________________________________
IPsec mailing list
IPsec@ietf.org
https://www.ietf.org/mailman/listinfo/ipsec