linux xfrm question

Hi

I wanted to add multiple SAs but only one SPD. SPD has remote address
as wildcard but proper local address. SAs have both proper local and
remote address. Local address in all SAs and SPD is same. As IPsec has
to be applied for all packets, I wanted to avoid SPD setup and lookup
time.

When I use it this way, it seems that xfrm code adds bundles to the
same SPD which is a linear search. Is there a hash implementation
available for the same, or some other way to improve search time here?

Thanks
Chintu