Przeglądaj źródła

dtool: Upgrade default encryption algorithm to AES-256 (#1337)

The Blowfish cipher is no longer available on OpenSSL 3.x by default. It requires enabling the legacy cipher suite, which is compiled separately from the main OpenSSL library. AES-256 is a good replacement cipher that has hardware support in most newer computers. AES-256 is also available in OpenSSL 1.0.2.
Disyer 3 lat temu
rodzic
commit
7e4cf28f27
1 zmienionych plików z 2 dodań i 2 usunięć
  1. 2 2
      dtool/src/prc/encryptStreamBuf.cxx

+ 2 - 2
dtool/src/prc/encryptStreamBuf.cxx

@@ -63,10 +63,10 @@ EncryptStreamBuf() {
   _owns_dest = false;
 
   ConfigVariableString encryption_algorithm
-    ("encryption-algorithm", "bf-cbc",
+    ("encryption-algorithm", "aes-256-cbc",
      PRC_DESC("This defines the OpenSSL encryption algorithm which is used to "
               "encrypt any streams created by the current runtime.  The default is "
-              "Blowfish; the complete set of available algorithms is defined by "
+              "AES-256; the complete set of available algorithms is defined by "
               "the current version of OpenSSL.  This value is used only to control "
               "encryption; the correct algorithm will automatically be selected on "
               "decryption."));