Broadband Tech > Security > Security > What's the best encryption algorithm?

What's the best encryption algorithm?

I would avoid Triple AES and Triple blowfish. Running the same algorithm multiple times may result in less security then using the original algorithm one time. Some implementations of Triple DES have this problem, depending on how the keys are used. I have not heard of any research into "triple" versions of AES or blowfish. If it were me I'd choose AES. And I'd check into the implementation used by DriveCrypt. Many good encryption algorithms are rendered useless by poor implementations.

reply to Dalai
First off, AES is not an algorithm -- it's a standard. But nitpicking aside, I agree that AES is very likely to give you what you need. The reason it's usually a good choice is because it was painstakingly selected using a number of criterion, including security, speed, etc.

Out of many, many contenders AES won out. Unless you have very specific needs, AES-256 is probably going to do everything you want.
--
dmiessler.com -- grep understanding knowledge

reply to Dalai
Thank you all. But i'm still confuse about somethings.
How about Blowfish 448 bits? Why should i go for AES 256, if blowfish 448 bits seems stronger, and is not triple?
Thanks again

reply to Dalai
At these strength levels (256+ for most) it's not really an issue which is higher than the others. A 256-bit key length is just so incredibly large that adding to it becomes unnecessary given our current and foreseeable computer systems.

Only quantum-based attacks and/or an algorithm compromise could potentially break encryption at this level, and the former would break both and AES is more likely to stand up to an algorithm attack than Blowfish just because it's been scrutinized more.

I say AES-256.
--
dmiessler.com -- grep understanding knowledge

As Daniel said, EAS creates a key so very large that based upon the way computer technology is progressing, even the largest super computers would probably take the age of the universe and then some to crack it.

Trust me, there isn't anything better than AES-256.
--
Tom

I'm a big fan of ROT-2041

I can achieve the same through Triple Rot-13, so there!

reply to Dalai
Answer is much more simple:
Dont use any Drivecrypt products. They smell snakeoil. Having something like "military grade encryption" and "triple AES" and "triple blowfish" sounds 99% of snakeoil to me. Maybe they are ok, maybe not. But I would not use any products from a company that uses those kinds of expressions to describe their products, since that reflects hype and lack of knowledge of cryptography.

ALSO, the fact that they allow users to chooce encryption algorithms that are already broken (like TEA, Misty, DES) shows their lack of knowledge or careness.

Grap and use Truecrypt instead. Besides, Truecrypt is completely free, its open source and you can use algorithms like Twofish and Serpent also with it (not to mention you can use cascaded ciphers like Twofish-Serpent-AES).
--
My computer security & privacy related homepage »www.markusjansson.net
Use HushTools or GnuPG/PGP to encrypt any email before sending it to me to protect our privacy.

reply to Steve

said by Steve:

I'm a big fan of ROT-2041

Rot-2042 Would be the reverse of 2041. =)

reply to jansson_mark

reply to trparky

said by trparky:

As Daniel said, EAS creates a key so very large that based upon the way computer technology is progressing, even the largest super computers would probably take the age of the universe and then some to crack it. . . .

reply to Dalai
I use SecureIt and I use the 448 Blowfish. Works for me.

But this is the first thread I've read where it makes me consider using AES 256 instead. So should I use Blowfish448 or AES 256?

reply to Dalai
Key size is not everything. Almost all of those algorithms, except AES & Square, are 64 bit block ciphers. They are more vulnerable to a birthday attack when you encrypt large amounts of data (bad for file encryption). (AES has a 128 bit blocksize). I would pick AES 256.

reply to Steve

reply to Sentinel

reply to Dalai

AES-256 and Truecrypt.