[VOIPSEC] open voip crypto

[Joseph Burdick]

What are the components of an open source, encrypted, voip (pref sip)
network if I were to assemble them today (no vaporware)?  I'll muse a bit
and you all can fill in the gaps and possibly correct my direction.

SIP proxy that supports TLS like openSER
Clients that support SRTP (like spa2000, snom 360, XtenPro) and TLS (?)

minisip looks nice, but not complete
asterisk claims to have crypto possible in IAX, but I haven't heard of
anybody doing it
spa2000 with a cert (from voxilla) will do SRTP to a like endpoint (say via
fwd or direct IP), but not TLS/SIP?
Throw out the VPN card, it's not always suitable to a roaming endpoint

Thanks,
Joseph