diff --git a/easyrsa3/easyrsa b/easyrsa3/easyrsa
index a7d6345..3411d9a 100755
--- a/easyrsa3/easyrsa
+++ b/easyrsa3/easyrsa
@@ -861,7 +861,7 @@ See help output for usage details."
 
 	# parse command options
 	shift 2
-	local crypto="-des3"
+	local crypto="-aes256"
 	while [ -n "$1" ]; do
 		case "$1" in
 			nopass)	crypto= ;;