suggestion:
add “Use HW accel” checkbox to IP - IPsec - Proposals
(its need to disable hw accel with aes-cbc on CCR)
Related post: http://forum.mikrotik.com/t/is-re-ordering-fixed-yet-with-ipsec-and-hardware-acceleration-updating-thread/101814/1 (Is re-ordering fixed yet with IPSec and hardware acceleration? (Updating thread))