Changes between Version 20 and Version 21 of Openvpn23ManPage

Timestamp:

11/03/16 11:34:49 (7 years ago)

Author:

Samuli Seppänen

Comment:

Update man-page to 2.3.13

Openvpn23ManPage

@@ -4777 +4777 @@
 
 an abbreviation for Blowfish in Cipher Block Chaining mode.
-Blowfish has the advantages of being fast, very secure, and allowing key sizes
-of up to 448 bits.  Blowfish is designed to be used in situations where
-keys are changed infrequently.
-<P>
-For more information on blowfish, see
-<I><A HREF="http://www.counterpane.com/blowfish.html">http://www.counterpane.com/blowfish.html</A></I>
-
-<P>
-To see other ciphers that are available with
-OpenVPN, use the
+<P>
+Using BF-CBC is no longer recommended, because of it's 64-bit block size.  This
+small block size allows attacks based on collisions, as demonstrated by SWEET32.
+See <A HREF="https://community.openvpn.net/openvpn/wiki/SWEET32">https://community.openvpn.net/openvpn/wiki/SWEET32</A> for details.
+<P>
+To see other ciphers that are available with OpenVPN, use the
 <B>--show-ciphers</B>
 
 option.
-<P>
-OpenVPN supports the CBC, CFB, and OFB cipher modes,
-however CBC is recommended and CFB and OFB should
-be considered advanced modes.
 <P>
 Set
@@ -4918 +4910 @@
 <B>--proto udp</B>
 
-is specifed, or no
+is specified, or no
 <B>--proto</B>
 
@@ -8567 +8559 @@
 <A HREF="/cgi-bin/man/man2html">man2html</A>,
 using the manual pages.<BR>
-Time: 15:54:26 GMT, August 23, 2016
+Time: 11:31:53 GMT, November 03, 2016
 }}}