new daddy
I'm switching my Open VPN provider due to technical issues. It kept dropping Open VPN.
The new one that I chose -- a fairly well-known service provider -- works well with my DD-WRT router.
One thing that worries me a little is that the new service provider only offers Blowfish CBC for encryption, whereas the old one offered 256-bit AES.
How concerned should I be about this?
Since I'll be using Open VPN through my router -- not just from an individual PC --, all the internet traffic generated from my home will be on Blowfish. That includes online banking, shopping, etc.
Is Blowfish still good enough for such sensitive information?
maikcat
the encryption alg used is one part of the security equation...
if an attacker can determine the keys used then the alg is useless,
aes (rijndael) is stronger but blowfish is faster and less secure...
you should look the whole configuration used before deciding though (f.e is your provider using tls-auth? is he using TLS 1.2?).
Michael.