sm: Change default algos to SHA256 (CSR) and AES128 (bulk encryption).