The version 2 prototype boards arrived, and after an evening of hacking on the firmware, it is functional. I'm getting around 250 kB/sec even with full crypto. There are some rough edges still - the crypto isn't working with DMA (though it is interrupt driven), and I haven't yet attempted the USART-in-SPI-master mode to see if it makes any difference.