Predictable initialization vectors in IPsec ESP encryption, allowed by the IPsec specifications and used by most implementations,
compromise IPsec confidentiality. By using an adaptive chosen plaintext attack, an attacker can break low entropy plaintext
blocks using brute force, and confirm guesses of the contents of arbitrary plaintext blocks. We analyze the preconditions
and the seriousness of such attacks, and provide results of practical attack experiments.