Samba 4.25.0 switches to AES-only enctypes and ships persistent handles as experimental
The first stable of the 4.25 series makes AES the default key set on modern domains, fixing CVE-2026-20833, and offers SMB3 persistent handles with an unusually direct cost list.