|
It's only as strong as the weakest link - this may be your password (normally it's the case), the algorhytm, the weakness in code, etc.
A two character password makes using any encryption useless.
A strong password (that I define as 10+ upper and lower case letters and numbers not containing any dictionary words) makes it hard to brute force, but if ten years from now they have tools and know-how allowing one to break, say, RC40 without being a scientist, now your password becomes irrelevant.
Bottom line, one needs to be using the strongest password one can live with, the strongest algorhytm available, and the program one can trust to be free of backdoors and holes. Can't be safe unless all three conditions are reasonably met.
|