Comparison of cryptography VipNet and Continent?

Question

Cryptography

The question arose here of the cryptographic architectural security of these two products when connecting subscriber stations.
For vipnet descriptions of cryptography here
www.slideshare.net/Infotecs_Academy/vi-p-net-51347002
www.infotecs.ru/support/faq/?SECTION_ID=57
https://infotecs.ru/products/catalog.php?ELEMENT_ID= 178
Interesting information:
Paired symmetric encryption keys providing guaranteed high encryption strength. The symmetrical key structure does not require additional open synchronization procedures for key generation, which increases the system's noise immunity, eliminates delays in the processing of any network protocols, provides -------instantaneous (by the first incoming IP packet) organization of any network connections --- --------- other VPN members.
I did not find a detailed description on the continent, but from the instructions, the PKI architecture is used.
At the subscriber station, a private key is generated through a biological sensor. Certificates are used, public/private key pairs.
In vipnet, there are no certificates, you don't need to generate a private key, just import the session key and go ahead - the Subscriber Station is connected. (the key is protected by the user's password, judging by the slides above)
It turns out that the vipnet, although faster and more noise-resistant, is less secure in terms of cryptographic architecture?

Answer 1

After I worked in a company that develops domestic means of protection and encryption, I will put something like this only at gunpoint.

Answer 2

Unfortunately, so far Russian IS vendors only have regulatory certificates as an advantage.
If you need safety and convenience + an adequate price, it is better to look at foreign manufacturers, incl. opensource.
If we compare only this performance: SD Continent vs VipNet, then IMHO, here the Continents of new versions win both in security (PKI + the ability to use third-party CAs) and in performance.
But the Access Server is just one aspect of the whole functionality of both PACKs.