If it is not too late, please ignore my previous request for an explanation of how tapper works. I found the answer in alt.privacy.clipper. The missing piece of info was that the session key must be negotiated separately. -- david [email protected]