Encapsulating Security Payload (ESP) provides some of the services of Authentication Headers (AH), but it is primarily designed to provide:

A. Confidentiality
B. Cryptography
C. Digital signatures
D. Access Control