This memo describes a method to enable encryption in ESP [ESP] by using the Host Identity Payload, HIP [HIP]. Two initial datagrams that use HIP to authenticate a Diffie-Hellman exchange are sufficient to establish the keying material for ESP. Further information on the other components necessary for ESP implementations is provided by [Thayer97a].