wpa_supplicant version 0.5.4 has support for EAP-FAST encryption, but doesn't compile it. echo "CONFIG_EAP_FAST=y" >> "${CONFIG}" is necessary on the ebuild.
When openssl supports SSL_set_hello_extension on all platforms that wpa_supplicant supports we can until this, until then we cannot.