18.104.22.168. Packet Encrypt
When a plaintext packet is coming through the encryption Controlled port, an SA is assigned to the packet. Since there is only 1 active SA on Tx SC, the active SA is used for the packet. There is no lookup required since simple muxing of 8 SAs within the 2 Tx SC derives which SA is active for the port.