Kolusion
So I setup OpenVPN for the first time using the Static Key Mini-HOWTO which uses the default cipher BF-CBC. On startup, I was warned the cipher is vulnerable to the SWEET32 attack. I have since changed the cipher to AES-256-CBC, but I am wondering if I need change my static.key to be safe.
My understanding is there is a separate process for authentication which doesn't use static.key, and instead uses something else which involves SHA or whatever, so I shouldn't have to change my static.key.
Can static.key be seen if the cipher is cracked?
