diff --git a/draft-ietf-quic-tls.md b/draft-ietf-quic-tls.md
index 3005087f68..cf290f8470 100644
--- a/draft-ietf-quic-tls.md
+++ b/draft-ietf-quic-tls.md
@@ -1800,7 +1800,7 @@ The unprotected header includes the connection ID and a 4 byte packet number
 encoding for a packet number of 2:
 
 ~~~
-c3ff000017088394c8f03e5157080000449e00000002
+c3ff000019088394c8f03e5157080000449e00000002
 ~~~
 
 Protecting the payload produces output that is sampled for header protection.
@@ -1815,15 +1815,15 @@ mask = AES-ECB(hp, sample)[0..4]
 
 header[0] ^= mask[0] & 0x0f
      = c0
-header[17..20] ^= mask[1..4]
+header[18..21] ^= mask[1..4]
      = 3b343aa8
-header = c0ff000017088394c8f03e5157080000449e3b343aa8
+header = c0ff000019088394c8f03e5157080000449e3b343aa8
 ~~~
 
 The resulting protected packet is:
 
 ~~~
-c0ff000017088394c8f03e5157080000 449e3b343aa8535064a4268a0d9d7b1c
+c0ff000019088394c8f03e5157080000 449e3b343aa8535064a4268a0d9d7b1c
 9d250ae355162276e9b1e3011ef6bbc0 ab48ad5bcc2681e953857ca62becd752
 4daac473e68d7405fbba4e9ee616c870 38bdbe908c06d9605d9ac49030359eec
 b1d05a14e117db8cede2bb09d0dbbfee 271cb374d8f10abec82d0f59a1dee29f
@@ -1860,7 +1860,7 @@ eaf45a9bf27dc0c1e784161691220913 13eb0e87555abd706626e557fc36a04f
 cd191a58829104d6075c5594f627ca50 6bf181daec940f4a4f3af0074eee89da
 acde6758312622d4fa675b39f728e062 d2bee680d8f41a597c262648bb18bcfc
 13c8b3d97b1a77b2ac3af745d61a34cc 4709865bac824a94bb19058015e4e42d
-c9be6c7803567321829dd85853396269
+aebe13f98ec51170a4aad0a8324bb768
 ~~~
 
 ## Server Initial
@@ -1879,7 +1879,7 @@ The header from the server includes a new connection ID and a 2-byte packet
 number encoding for a packet number of 1:
 
 ~~~
-c1ff0000170008f067a5502a4262b50040740001
+c1ff0000190008f067a5502a4262b50040740001
 ~~~
 
 As a result, after protection, the header protection sample is taken starting
@@ -1888,17 +1888,17 @@ from the third protected octet:
 ~~~
 sample = 7002596f99ae67abf65a5852f54f58c3
 mask   = 38168a0c25
-header = c9ff0000170008f067a5502a4262b5004074168b
+header = c9ff0000190008f067a5502a4262b5004074168b
 ~~~
 
 The final protected packet is then:
 
 ~~~
-c9ff0000170008f067a5502a4262b500 4074168bf22b7002596f99ae67abf65a
+c9ff0000190008f067a5502a4262b500 4074168bf22b7002596f99ae67abf65a
 5852f54f58c37c808682e2e40492d8a3 899fb04fc0afe9aabc8767b18a0aa493
 537426373b48d502214dd856d63b78ce e37bc664b3fe86d487ac7a77c53038a3
-cd32f0b5004d9f5754c4f7f2d1f35cf3 f7116351c92b9cf9bb6d091ddfc8b32d
-432348a2c413
+cd32f0b5004d9f5754c4f7f2d1f35cf3 f7116351c92b99c8ae5833225cb51855
+20d61e68cf5f
 ~~~
 
 
diff --git a/initial-protection.js b/initial-protection.js
index 785772d3d5..865a72cb7a 100755
--- a/initial-protection.js
+++ b/initial-protection.js
@@ -252,7 +252,7 @@ function test(role, cid, hdr, pn, body) {
   }
 }
 
-var version = 'ff000017'
+var version = 'ff000019'
 var cid = '8394c8f03e515708';
 
 var dcidl = '0' + (cid.length / 2).toString(16);