IPSec research

[verberk () NORTELNETWORKS COM (Bep Verberk)]

I'm trying to locate some research/documents/papers discussing the use
of IPSec to provide enhanced security. Aside from the obvious
performance hit, people seem to be talking like this is the "silver
bullet"
for security over IP.

Surely, there must be some inherent flaws ?
What about the need for a trusted key exchange system ? Is that
vulnerable ?

Perhaps a good idea in theory will fall apart due to bad
implementations,
riddled with buffer overflow exploits and DOS vulnerabilities ??

Any thoughts, ideas, pointers ?

Cheers.