I've been out of the security game for a while, but a couple years ago the rule of thumb was to avoid CBC and use GCM. Edit: There's a good explanation here ht

I've been out of the security game for a while, but a couple years ago the rule of thumb was to avoid CBC and use GCM. Edit: There's a good explanation here https://crypto.stackexchange.com/questions/2310/what-is-the-difference-between-cbc-and-gcm-mode https://crypto.stackexchange.com/questions/2310/what-is-the-...