You need IOS Advaced IP services or security feature set
Look it on cisco feature navigator
http://www.cisco.com/go/fn
select Search by Feature and for feature select IPsec what you need for example IPSec Triple DES Encryption (3DES) - its minimum security for todays VPNs... than continue with platform selection a try to find best IOS for your routet flash and memory
M.
Hope that helps, rate if it does