dtool: Upgrade default encryption algorithm to AES-256 (#1337)

The Blowfish cipher is no longer available on OpenSSL 3.x by default. It requires enabling the legacy cipher suite, which is compiled separately from the main OpenSSL library. AES-256 is a good replacement cipher that has hardware support in most newer computers. AES-256 is also available in OpenSSL 1.0.2.
This commit is contained in:
Disyer 2022-07-22 01:40:20 +03:00 committed by rdb
parent 7a55c723ba
commit 7e4cf28f27

View File

@ -63,10 +63,10 @@ EncryptStreamBuf() {
_owns_dest = false;
ConfigVariableString encryption_algorithm
("encryption-algorithm", "bf-cbc",
("encryption-algorithm", "aes-256-cbc",
PRC_DESC("This defines the OpenSSL encryption algorithm which is used to "
"encrypt any streams created by the current runtime. The default is "
"Blowfish; the complete set of available algorithms is defined by "
"AES-256; the complete set of available algorithms is defined by "
"the current version of OpenSSL. This value is used only to control "
"encryption; the correct algorithm will automatically be selected on "
"decryption."));