AH (Authentication Header) provides the authentication, integrity, and replay protections of IPsec. It is not responsible for encryption.