AES-GCM is recommended instead of AES-CBC, but openssl _(especially on Mac)_ has known issues. Not a trival change.
AES-GCM is recommended instead of AES-CBC, but openssl (especially on Mac) has known issues. Not a trival change.