3 ms·doc says it defaults to cbc, not sure about the kdfby cryptoishard 9y agodoc says it defaults to cbc, not sure about the kdf