They use AES and RSA but their implementation has had vulnerabilities. http://docs.saltstack.com/topics/releases/0.15.1.html http://docs.saltstack.com/topics/r

They use AES and RSA but their implementation has had vulnerabilities. http://docs.saltstack.com/topics/releases/0.15.1.html http://docs.saltstack.com/topics/releases/0.15.1.html https://github.com/saltstack/salt/commit/5dd304276ba5745ec21fc1e6686a0b28da29e6fc https://github.com/saltstack/salt/commit/5dd304276ba5745ec21... Here's a good article( http://missingm.co/2013/06/ansible-and-salt-a-detailed-comparison/ http://missingm.co/2013/06/ansible-and-salt-a-detailed-compa...) with a comparison to Ansible that others are also mentioning here. Ansible uses KeyCzar which which seems more sane than rolling your own crypto as many readers here on HN know.