RE: RE: [PHP] Mcrypt: Blowfish or Twofish or no fish? part 3

why use AES? Blowfish can have a 448 bit key size! Also, why use ebc mode with all the problems which come with it? JH -----Original Message----- From: Vinod Panicker [mailto:thisisvinod@rediffmail.com] Sent: 22 May 2002 10:06 To: Jimmy Lantz Cc: php-general@lists.php.net Subject: Re: RE: [PHP] Mcrypt: Blowfish or Twofish or no fish? part 3 There is no use of hashing in file-encryption except to use it as a check - to see if the decrypted file matches the original file. To do this check, you can use either MD5 or SHA1. The choice is urs. If ur looking for a good encryption algorithm, you might want to consider AES (Rijndael). It supports encryption using different key sizes as well as all modes. You can take your pick from ECB / CBC also. For binary file encryption, i would recommend ECB mode. For text files, it would be better that you use CBC mode. Tx, Vinod. On Wed, 22 May 2002 Jimmy Lantz wrote : > > >>I believe that twofish has been successfully broken, so use >>blowfish >>instead. Typically, for encrypting files you will use an >>algorithm like >>blowfish in cbc mode (as opposed to ebc mode) but I don't know >>if Mcrypt >>supports this. Also, when creating the hash of the file, it is >>probably best >>to use SHA-1 instead of MD5, as there appears to be some concern >>with MD5 >>over it's compression function. >>HTH >>JH > >It helps :) >I have been looking into Blowfish with cbc mode :) >If I use SHA-1 it's still no way to dehash it during decryption >of the file, >so I fail to see the use of Hashing in fileencryption. >Could someone enlighten me? >/ Jim > > >-- PHP General Mailing List (http://www.php.net/) >To unsubscribe, visit: http://www.php.net/unsub.php > _________________________________________________________ Click below to visit monsterindia.com and review jobs in India or Abroad http://monsterindia.rediff.com/jobs -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php