Skip to main content

You are not logged in. Your edit will be placed in a queue until it is peer reviewed.

We welcome edits that make the post easier to understand and more valuable for readers. Because community members review edits, please try to make the post substantially better than how you found it, for example, by fixing grammar or adding additional resources and hyperlinks.

4
  • $\begingroup$ This makes a good point, using a second encryption scheme which is a strong contender with AES would make sense to increase security significantly as opposed to re-inventing the wheel (or at least making my own "wheel"). Would +1 but can't due to rep. However, the linked post isn't quite accurate to the situation. They all deal with educated guessing or suspecting common phrases in the unencrypted text, where as I am encrypting something then performing a two+ pad on it. The underlying bits wouldn't really be "guessable" as far as I know? Still a good read, though. $\endgroup$ Commented Jul 17, 2014 at 19:29
  • $\begingroup$ Also should be noted I'm not interested in implementing this, and will more than likely just add another layer of security if I went that route (I trust AES so I don't really think it's a huge issue), but the way I see it still is even if they were able to get 100 of the files that were represented in the encrypted files as well (Through finding them on the drive, not decryption), it still wouldn't really help them break the XOR pad since there's still a layer of AES separating it. Or am I looking at that wrong? Thanks for the answer, as well! $\endgroup$ Commented Jul 17, 2014 at 19:32
  • $\begingroup$ @ThomasF., whether those attacks in particular would apply would depend on how AES would be broken. For example, if the attacker knew how to discern patterns in AES output, that might be analogous to knowing patterns in English. $\endgroup$ Commented Jul 17, 2014 at 19:32
  • $\begingroup$ That's true, in which case my previous (second) comment would be rendered moot as they could then use those 100 files to essentially guess between the layer of AES. $\endgroup$ Commented Jul 17, 2014 at 19:33