diff options
| author | lloyd <[email protected]> | 2009-12-26 17:02:01 +0000 |
|---|---|---|
| committer | lloyd <[email protected]> | 2009-12-26 17:02:01 +0000 |
| commit | 4400704b743fdf13e903c228cec5a20fce265a5d (patch) | |
| tree | 0ca6fce5bbc6b77ca7de8bcb83424ee5a1886340 /doc/fips140.tex | |
| parent | 0d524165735b925f6aeb4c8c3934c79071018025 (diff) | |
Switch from TripleDES to AES-256 for private key encryption by
default. OpenSSL 0.9.8 understands keys encrypted like this fine,
which was the big reason for holding back on this before IIRC.
AES-256 was chosen over AES-128 not for the longer key
length (it's a password hash so unlikely to have more than 96 bits of
entropy) but for the extra 4 rounds of AES-256 vs AES-128.
Diffstat (limited to 'doc/fips140.tex')
0 files changed, 0 insertions, 0 deletions