xfrm: Move IPsec replay detection functions to a separate file