openpgp: Make OCB the default on Nettle if available.

1 files changed, 5 insertions, 1 deletions

diff --git a/openpgp/src/crypto/backend/nettle.rs b/openpgp/src/crypto/backend/nettle.rs
index 2d73705a..04fef2eb 100644
--- a/openpgp/src/crypto/backend/nettle.rs
+++ b/openpgp/src/crypto/backend/nettle.rs
@@ -37,7 +37,11 @@ impl AEADAlgorithm {
     /// algorithm and the most performing one, but fall back to any
     /// supported algorithm.
     pub(crate) const fn const_default() -> AEADAlgorithm {
-        AEADAlgorithm::EAX
+        if nettle::aead::OCB_IS_SUPPORTED {
+            AEADAlgorithm::OCB
+        } else {
+            AEADAlgorithm::EAX
+        }
     }
 
     pub(crate) fn is_supported_by_backend(&self) -> bool {