Originally Posted by Ilium Software
|
Actually the 'broken' part refers to a flaw that eWallet doesn't suffer from. As long as you select a good password 256 bit RC4 encryption would take something in the area of 20,000 years to hack by brute force.
And the difference between 40 bit and 256 bit is astronomical since it is an exponential increase in security. I agree that there are stronger means of encryption but quite frankly, unless you are under the serious threat of a major government attempting to hack your wallet, it is simply overkill.
And yes, in the end it all comes down to a good password.
Marc Tassin
Ilium Software
--------------------
|
My post was quite clear thank you. RC4 was broken at 40-bit.
And "overkill" is relative. But when it comes to my security, overkill is always better. Like I said, I use eWallet, but I would not consider it the most secure option. Don't know why eWallet doesn't use a more standard encryption algorithm like AES - the government standard. Or at least another algorithm that hasn't been broken - even if it was at a lower bitrate. It can't really increase processing overhead by that much more.