Right now, AES-256-CBC
is hardcoded as encryption algorithm. Other AES-256 modes, such as GCM, offer some benefits over CBC (like authentication). Changing this would be a breaking change, so a possibility would be to introduce an option to specify the encryption algorithm used.
I haven't looked too much into the encryption implementation, but using other AES-256 modes may require some other changes, like making sure the auth tag is added to the ciphertext.
Pay now to fund the work behind this issue.
Get updates on progress being made.
Maintainer is rewarded once the issue is completed.
You're funding impactful open source efforts
You want to contribute to this effort
You want to get funding like this too