Figure 1 Authentication Header (AH) transformation, showing (a) original IP (IPv4) datagram, (b) transport mode authentication with checksum coverage, (c) tunnel mode replacement of original IP header.