Two functions provided by IPSec

Which two functions are required for IPsec operation?