IBM® CP Assist for Cryptographic Functions (CPACF), where available, or a cryptographic coprocessor provide support for IPSec encryption, decryption, and hashing functions. Where such hardware features are not available, IPSec's encryption, decryption, and hashing functions are performed in software.