I wrote:
Offloading AES or SHA1 is not very practical, as software implementations can already handle over 1Tbps on modern CPUs.  I bet stunnel deployments that need to handle over 1Tbps traffic are not very common.
Of course I meant 1Gbps and not 1Tbps.  8-)

Mike