Which of the following statements about Encapsulating Security Payload (ESP) is true?