Announcement

Collapse
No announcement yet.

Best algorithm for mcrypt?

Collapse
This topic is closed.
X
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

    Best algorithm for mcrypt?

    I'm adding to a backup script that I wrote so that it will encrypt my backup file and email it to an external email address.

    Not knowing anything about encryption, I thought I'd ask for any advice you can give: which algorithm should I use that gives reasonably strong encryption, without going overboard with CPU/time? I don't actually think someone is going to hack into my email account and steal the backup, but if you're going to do it, you might as well do it properly, right?

    Here is the list of algorithms available:

    Code:
    feathers-mcgraw@Hobbs-T440s:~$ mcrypt --list
    cast-128 (16): cbc cfb ctr ecb ncfb nofb ofb 
    gost (32): cbc cfb ctr ecb ncfb nofb ofb 
    rijndael-128 (32): cbc cfb ctr ecb ncfb nofb ofb 
    twofish (32): cbc cfb ctr ecb ncfb nofb ofb 
    arcfour (256): stream 
    cast-256 (32): cbc cfb ctr ecb ncfb nofb ofb 
    loki97 (32): cbc cfb ctr ecb ncfb nofb ofb 
    rijndael-192 (32): cbc cfb ctr ecb ncfb nofb ofb 
    saferplus (32): cbc cfb ctr ecb ncfb nofb ofb 
    wake (32): stream 
    blowfish-compat (56): cbc cfb ctr ecb ncfb nofb ofb 
    des (8): cbc cfb ctr ecb ncfb nofb ofb 
    rijndael-256 (32): cbc cfb ctr ecb ncfb nofb ofb 
    serpent (32): cbc cfb ctr ecb ncfb nofb ofb 
    xtea (16): cbc cfb ctr ecb ncfb nofb ofb 
    blowfish (56): cbc cfb ctr ecb ncfb nofb ofb 
    enigma (13): stream 
    rc2 (128): cbc cfb ctr ecb ncfb nofb ofb 
    tripledes (24): cbc cfb ctr ecb ncfb nofb ofb
    The default is "rijndael-128, keysize: 32 bytes, mode: cbc,".

    Thanks,

    Feathers
    samhobbs.co.uk

    #2
    I would choose the default one wich is rijndael. It has been used for many years and I think it is still a good one. Found a link to a pdf if you are intressted in reading some of the stuff. It is here. Old one but still...

    Another link if you want some more input on the subject

    Anyway if a hacker would hack you're computer then they would probably know how to bruteforce the encryption. No data is safe some people say.

    Comment


      #3
      Thank you for the links!

      I get what you're saying there, I kind of just wanted to learn about it and add an extra layer of protection. I don't think anyone is likely to hack into my email account but I don't trust Microsoft not to go rummaging, and I don't trust Google either - don't want to give them any more private data than they already have.
      samhobbs.co.uk

      Comment


        #4
        AES is Rijndael. Use that one. And 128 bits is sufficient. In fact, it's (marginally) safer than 192 or 256.

        Comment

        Working...
        X