If I'm reading the config file comments correctly:
# proto: list of accepted protocols
# WPA = WPA/IEEE 802.11i/D3.0
# RSN = WPA2/IEEE 802.11i (also WPA2 can be used as an alias for RSN)
# If not set, this defaults to: WPA RSN
it seems that wpa_supplicant uses WPA2 (aka RSN) encryption by default. Is this correct?