WPA1 (WPA with TKIP) is pretty darn secure, I would just run that and use the pda, /shrug. It's not like the difference between WEP and WPA, which is vast.
Sorry if I was mistaken, you have to realize, I have a very ciscocentric view of wireless, and Cisco considers WPA to be a "Key Mangement" thing, seperate from encryption (for the most part, can't select WEP and WPA, invalid options). You can do WPA with AES, TKIP, TKIP+AES. All using AES are considerd WPA2 by the INtel client, broadcom client, atheros client, and the cisco AP.