Use AES 256 CBC with a SHA1 HMAC for VPN traffic