Which header is used when a data plane IPsec packet is created?

Which header is used when a data plane IPsec packet is created?
A. IKEv1
B. AES
C. SHA
D. ESP