--- gvpe/NEWS 2015/01/29 00:21:38 1.124 +++ gvpe/NEWS 2015/01/29 00:24:21 1.125 @@ -34,7 +34,7 @@ openssl). this gets rid of the need to generate a random iv, is likely more secure (and, as a side effect, gets rid of slow randomness generation. counter mode is often faster - then cbc mode as well). + then cbc mode as well, and packets are smaller). - no longer use RAND_bytes to generate session keys - you NEED a real source of entropy now (e.g. egd or /dev/random - see the openssl documentation).