Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I just set up my installation of OpenVPN on my server.

I am curious why the OpenVPN manual recommends CBC mode. I heard that CBC is predictable and not secure; is that true?

share|improve this question
If it's used correctly (With random IV and a MAC in a encrypt-then-mac scheme) CBC is secure. – CodesInChaos Dec 25 '12 at 22:25
By the way: Welcome to IT Security, Disa! – D.W. Dec 26 '12 at 1:44
up vote 6 down vote accepted

What you've heard is not accurate. CBC is secure, if used properly. OpenVPN does use CBC mode correctly. Generally speaking, OpenVPN is very well designed, and you shouldn't need to worry about this. You shouldn't need to change the default settings for cryptographic algorithms.

In fact, CBC mode is the default mode of operation for OpenVPN, so you do not need to change anything; you can just stick with the defaults, and I recommend you do so.

OpenVPN also supports CFB and OFB modes, but those modes have no advantages over CBC mode (and OFB mode has some potential disadvantages). Therefore, I think OpenVPN's default of CBC is a reasonable and sensible choice.

OpenVPN supports many symmetric-key algorithms. The default is Blowfish, bu tit also supports DES, 3DES, DESX, RC2, CAST5, AES, CAMELLIA, and SEED. Blowfish is a fine choice. AES would be arguably the more conservative, conventional choice, but frankly either Blowfish or AES is fine. I would definitely avoid single-DES (or anything that is listed as a 40-bit or 64-bit key), and I would try to avoid RC2, CAMELLIA, SEED, CAST5, and DESX if I could -- but this is a detail. In any case, OpenVPN's defaults are fine, so I suggest you just stick with them, rather than try to tweak them.

A comment for the future: If you want us to comment on a recommendation from someone else, it helps if you can link to the primary source. (You didn't tell us where you got the recommendation to use CBC mode in OpenVPN.) This time I was able to work out what you meant, but for the future, this might be helpful if you post other questions.

share|improve this answer
Thank you for the answer. BTW I updated my first post to include the link. – Disa Dec 26 '12 at 9:38
OpenVPN-NL (a "hardened" version developed by the dutch government) uses AES-256-CBC. That might be a safe choice. – Matthias Weiler May 20 at 11:41

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.