I've been following the debate with interest. My patch currently supports 
DES and 3DES encryption and I've made it easily extensible to other 
ciphers. I've started looking at AES (entirely different userland and 
kernels APIs don't help!), for instance.

Patch for anyone interested can be found at: 
http://www.precedence.co.uk/support/downloads/netbsd/vnd.crypt.diff

-- 
Stephen