why use AES? Blowfish can have a 448 bit key size! Also, why use ebc mode
with all the problems which come with it?
JH

-----Original Message-----
From: Vinod Panicker [mailto:[EMAIL PROTECTED]]
Sent: 22 May 2002 10:06
To: Jimmy Lantz
Cc: [EMAIL PROTECTED]
Subject: Re: RE: [PHP] Mcrypt: Blowfish or Twofish or no fish? part 3


There is no use of hashing in file-encryption except to use it as 
a check - to see if the decrypted file matches the original file.  
To do this check, you can use either MD5 or SHA1.  The choice is 
urs.

If ur looking for a good encryption algorithm, you might want to 
consider AES (Rijndael).  It supports encryption using different 
key sizes as well as all modes.

You can take your pick from ECB / CBC also.  For binary file 
encryption, i would recommend ECB mode.  For text files, it would 
be better that you use CBC mode.

Tx,
Vinod.

On Wed, 22 May 2002 Jimmy Lantz wrote :
>
>
>>I believe that twofish has been successfully broken, so use 
>>blowfish
>>instead. Typically, for encrypting files you will use an 
>>algorithm like
>>blowfish in cbc mode (as opposed to ebc mode) but I don't know 
>>if Mcrypt
>>supports this. Also, when creating the hash of the file, it is 
>>probably best
>>to use SHA-1 instead of MD5, as there appears to be some concern 
>>with MD5
>>over it's compression function.
>>HTH
>>JH
>
>It helps :)
>I have been looking into Blowfish with cbc mode :)
>If I use SHA-1 it's still no way to dehash it during decryption 
>of the file,
>so I fail to see the use of Hashing in fileencryption.
>Could someone enlighten me?
>/ Jim
>
>
>-- PHP General Mailing List (http://www.php.net/)
>To unsubscribe, visit: http://www.php.net/unsub.php
>

_________________________________________________________
Click below to visit monsterindia.com and review jobs in India or 
Abroad
http://monsterindia.rediff.com/jobs


-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to