The benefits and downsides are discussed in this crypto.stackexchange thread. This is called cascading encryption and Veracrypt offers such an option.
Using multiple different ciphers, so that there is still sufficient protection if one of the ciphers gets broken.256 bit keys (like Cryptomator uses) are even better, but not because of progression in computing power itself but because of potential complexity reduction in quantum algorithms like Grover’s algorithm that allow bruteforcing out 2 256 keys in just n*2 128 operations which is (as I said before) considered a sufficient security margin for the foreseeable future. 128 bit keys are considered secure for now. This is why there is an ample security margin when it comes to key lengths. Advances in computing capabilities (Moore’s law).We need to distinguish two different scenarios here: My understanding is that by using multiple ciphers you can configure a Veracrypt vault in a way that it would virtually be unbreakable even in the face of rapid advances in computing, which doesn’t seem to be the case with Cryptomator. I personally recommend Veracrypt to people who want to encrypt their USB flash drive and Cryptomator to people who want to synchronize encrypted files to some server. While this enables cloud synchronization of just the files that really changed, it leaks the information how many files exist in a vault. Veracrypt creates just one container, so an attacker does not even know how many files you have.Ĭryptomator encrypts each file for its own. On the other hand if AES gets broken, we can not easily switch to let’s say Twofish without publishing a new release. Also our pre-chosen ciphersuite means less complexity and less attack surface.
#Best veracrypt encryption algorithm software#
We don’t want to give the user all the choices, we want to offer a software that is as easy as possible. Our philosophy is slightly different here.
This is beneficial to users who know exactly what they want.Ĭryptomator uses the ciphers and configurations that are known to work well with each other. Veracrypt lets you configure what ciphers and key lengths you’re using. I’ve heard that with the advances currently being made in computing, many of the encryption algorithms that are considered strong now may not be considered strong in the near future, and this is also a big concern of mine. Is the encryption algorithm used by Cryptomator “enough”? Is it substantially weaker than the encryption you can get with Veracrypt? This is what I’m not sure about. I want to know how valid these concerns are though. I’ve never felt completely comfortable with the fact that there’s so little customization available with Cryptomator - what you see is what you get.
#Best veracrypt encryption algorithm plus#
The fact that Veracrypt volumes can be encrypted with so many different algorithms (AES, Serpent, Twofish, Camellia, Kuznyechik, and ten different combinations of these) plus the fact that you can further customize the encryption by moving your mouse randomly within the Volume Creation Wizard for as long as you want (significantly increasing the cryptographic strength of the encryption keys) makes me feel as if Veracrypt must be far more secure than Cryptomator.
How does this stack up to Veracrypt though? I don’t understand enough about cryptography to make sense of this (despite the lack of a formal audit though, I’ve heard enough good things about the validity and trustworthiness of Cryptomator’s encryption that I’ve put my faith in it).
0 kommentar(er)
