How about add some lightweight crypto algorithm to RouterOS for devices not having hardware crypto engine?
The image below is result from openssl speed command.(Openssl 1.0.1u with LEA lightweight crypto integrated)
In simply, the LEA crypto exceeded about 3 times than AES in speed(Maybe we get less performance when adopted to tunneling. But It seems worth doing if it gives reasonable security.)