AES-128-GCM for speed, robust key scheduling, and authenticated mode against padding oracle attack, with UncensoredDNS.
the data flow is not steady