4 ms·
> Those seem quite the overstatements. In addition to other comments, OpenVPN's default cipher is Blowfish. Since that sounds unbelievable, here's the manpage
by Panino 8y ago
> Those seem quite the overstatements.
In addition to other comments, OpenVPN's default cipher is Blowfish. Since that sounds unbelievable, here's the manpage:
https://community.openvpn.net/openvpn/wiki/Openvpn24ManPage https://community.openvpn.net/openvpn/wiki/Openvpn24ManPage
"The default is BF-CBC, an abbreviation for Blowfish in Cipher Block Chaining mode."
If you read just a little further you'll see that RC2, 56-bit DES and other obsolete ciphers are supported as well. To put this in perspective, DES is from the same time period as Pink Floyd's Dark Side of the Moon.
I'm very excited for WireGuard to be ported to other platforms.
- aeries 8y agoWhen both sides are OpenVPN 2.4+, AES-256-GCM will be negotiated by default.
- agnokapathetic 8y agoEmphasis on "negotiated". The entire negotiation and key agreement stack is a larger codebase than all of Wireguard.
- stouset 8y agoThe difference between “it can be made to work securely” and “it works securely” is much more important than most people realize.