search

mattosaurus / PgpCore

.NET Core class library for using PGP
MIT License
244 stars 98 forks source link

Recommend AES over TripleDES #245

Closed Liam-Rougoor closed 1 year ago

Liam-Rougoor commented 1 year ago

By default, PGPCore uses TripleDES for symmetric encryption.

TripleDES is being deprecated by some security instutions, like NIST and AES is a (superior?) successor to TripleDES.

Ideally, something like AES should be the default. However, changing the default would introduce a breaking change. I would suggest to at least update the docs to warn against TripleDES.

mattosaurus commented 1 year ago

Yeah, I'm not sure if we want to change the default but adding in a note in the documentation is certainly a good idea.