Changes between Version 1 and Version 2 of Ticket #732


Ignore:
Timestamp:
09/08/16 20:26:25 (8 years ago)
Author:
krzee king
Comment:

Legend:

Unmodified
Added
Removed
Modified

  • Ticket #732 – Description

    v1 v2  
    11from 2.3 manual:
    2 {{{
    32--cipher alg
    43Encrypt data channel packets with cipher algorithm alg. The default is BF-CBC, an abbreviation for Blowfish in Cipher Block Chaining mode. Blowfish has the advantages of being fast, very secure, and allowing key sizes of up to 448 bits. Blowfish is designed to be used in situations where keys are changed infrequently.
    54
    6 }}}
    75
    86In light of sweet32 this probably needs an update in wording. I assume you guys have a few things to say here about cipher negotiation, but maybe for older manuals something like this will work:
    97
    108
    11 {{{
    129--cipher alg
    1310Encrypt data channel packets with cipher algorithm alg. The default in this version of openvpn is BF-CBC, an abbreviation for Blowfish in Cipher Block Chaining mode. Blowfish has the advantages of being fast and allowing key sizes of up to 448 bits. Blowfish was considered secure for a long time, but in 2016 the default was changed to AES after an attack against blowfish was demonstrated in a lab. For more information, see: http://community.openvpn.net/openvpn/wiki/SWEET32
    14 
    15 }}}