Default now is [SHA-1](https://security.googleblog.com/2017/02/announcing-first-sha1-collision.html) hashing and AES-128 cipher. 128 bit AES is probably enough but it would be nice to have the option of 256.