http://xxxxgvrs2u4ezbtld3qh6t5u7mtlimiphqm5sx5uchfz752ybin7flqd.onion/why-nobelium/index.html
DHE is utilized for perfect forward secrecy. A minimum TLS version of 1.2 is enforced for the control channel, with TLS 1.3 available. For the latest OpenVPN client versions, we offer the following ciphers, used in the specified order (unless the user applies a different configuration): control channel ciphers: TLS_CHACHA20_POLY1305_SHA256, TLS_AES_256_GCM_SHA384 data channel ciphers: CHACHA20-POLY1305, AES-256-GCM, AES-256-CBC.