Thanks to Colin Percival for reporting this issue.
Reviewed-by: Rich Salz <rsalz@openssl.org>
break;
#ifndef OPENSSL_NO_SCRYPT
case OPT_SCRYPT:
- scrypt_N = 1024;
+ scrypt_N = 16384;
scrypt_r = 8;
- scrypt_p = 16;
+ scrypt_p = 1;
if (cipher == NULL)
cipher = EVP_aes_256_cbc();
break;
=item B<-scrypt>
uses the B<scrypt> algorithm for private key encryption using default
-parameters: currently N=1024, r=8 and p=16 and AES in CBC mode with a 256 bit
+parameters: currently N=16384, r=8 and p=1 and AES in CBC mode with a 256 bit
key. These parameters can be modified using the B<-scrypt_N>, B<-scrypt_r>,
B<-scrypt_p> and B<-v2> options.