Switch from TripleDES to AES-256 for private key encryption by

default. OpenSSL 0.9.8 understands keys encrypted like this fine,
which was the big reason for holding back on this before IIRC.
AES-256 was chosen over AES-128 not for the longer key
length (it's a password hash so unlikely to have more than 96 bits of
entropy) but for the extra 4 rounds of AES-256 vs AES-128.

0 files changed, 0 insertions, 0 deletions