diff --git a/net/tinc/src/opnsense/mvc/app/models/OPNsense/Tinc/Tinc.xml b/net/tinc/src/opnsense/mvc/app/models/OPNsense/Tinc/Tinc.xml
index e44adff1f..633f34499 100644
--- a/net/tinc/src/opnsense/mvc/app/models/OPNsense/Tinc/Tinc.xml
+++ b/net/tinc/src/opnsense/mvc/app/models/OPNsense/Tinc/Tinc.xml
@@ -47,7 +47,7 @@
                     <Multiple>N</Multiple>
                     <ConfigdPopulateAct>tinc list ciphers</ConfigdPopulateAct>
                     <SourceFile>/tmp/tinc_current_cipher_options.index</SourceFile>
-                    <default>blowfish</default>
+                    <default>aes-256-cbc</default>
                 </cipher>
                 <enabled type="BooleanField">
                     <default>1</default>
@@ -105,7 +105,7 @@
                     <Multiple>N</Multiple>
                     <ConfigdPopulateAct>tinc list ciphers</ConfigdPopulateAct>
                     <SourceFile>/tmp/tinc_current_cipher_options.index</SourceFile>
-                    <default>blowfish</default>
+                    <default>aes-256-cbc</default>
                 </cipher>
                 <connectTo type="BooleanField">
                     <default>1</default>
diff --git a/net/tinc/src/opnsense/scripts/OPNsense/Tinc/lib/objects.py b/net/tinc/src/opnsense/scripts/OPNsense/Tinc/lib/objects.py
index 956586c92..299f00911 100644
--- a/net/tinc/src/opnsense/scripts/OPNsense/Tinc/lib/objects.py
+++ b/net/tinc/src/opnsense/scripts/OPNsense/Tinc/lib/objects.py
@@ -125,6 +125,7 @@ class Host(NetwConfObject):
         result.append('Address=%(address)s'%self._payload)
         result.append('Subnet=%(subnet)s'%self._payload)
         result.append('Cipher=%(cipher)s'%self._payload)
+        result.append('Digest=sha256')
         result.append(self._payload['pubkey'])
         return '\n'.join(result)