Not sure if it's wise to get a low-end CPU without h/w crypto accelerator to do the
heavy lifting on VPN? May be it will work, but at what speed?
< add a correction >
MT7688 has a module for AES128/256 in CBC mode.
Its current use is for encrypted channel in WiFi.