diff --git a/easyrsa3/easyrsa b/easyrsa3/easyrsa
index 02f253c..9faf79e 100755
--- a/easyrsa3/easyrsa
+++ b/easyrsa3/easyrsa
@@ -871,7 +871,7 @@ See help output for usage details."
 
 	# parse command options
 	shift 2
-	local crypto="-des3"
+	local crypto="-aes256"
 	while [ -n "$1" ]; do
 		case "$1" in
 			nopass)	crypto= ;;