Re:The most secure cloud is your computer
by newpavlov on Wednesday September 07, 2022 @05:48PM
(#32757437)
>is there an ecryption that's actually secure against state-level actors
Any modern symmetric encryption is extremely likely to be safe against state-level actors for the observable future assuming your encryption key is not compromised and has enough entropy in it. Even with quantum computers you only need twice longer keys. Roughly, AES-256 would provide AES-128 level of security in the presence of practical quantum computers.
If you feel especially paranoid about potential backdoors in algorithms, you can chain several algorithms from different organizations (e.g. AES, Kuznyechik, ChaCha20, and SM4) initialized with different keys. Though such practice is frowned upon by cryptographers.
Re:The most secure cloud is your computer
by bitwize on Thursday September 08, 2022 @12:55AM
(#32761342)
No algorithm can stand up to rubber-hose cryptanalysis. Relevant xkcd: https://xkcd.com/538/
Re:The most secure cloud is your computer
by Sohcahtoa82 on Wednesday September 07, 2022 @06:02PM
(#32757617)
> Here's the deal -is there an ecryption that's actually secure against state-level actors? Someone with the resources of the FBI etc?
Yes. AES-256.
One-Time Pads as well, but of course then you have the problem of how to securely store the pad.
Re:The most secure cloud is your computer
by jbverschoor on Wednesday September 07, 2022 @08:35PM
(#32759419)
For now
Re:The most secure cloud is your computer
by Sohcahtoa82 on Thursday September 08, 2022 @01:34AM
(#32761569)
Unless some mathematics/cryptography genius finds a vulnerability in the AES algorithm, or we improve processing power by many orders of magnitude, AES-256 is going to be immune to nation-state actors for decades or even hundreds of years. Right now, trying to break something encrypted with AES-256 is pretty futile. Even if you pointed every processor in the world at breaking it, you're likely to reach the heat death of the universe several times before succeeding.
Now, before you say "I don't do anything illegal so it doesn't matter, I'm only worried about corporations" think for a minute about how often companies do have ties (even informal ones -like friends) with people who work in agencies with those resources. You still run the very real and likely risk of a quid-pro-quo ("hey, if you can give us a way to peek into these encrypted drives we'll leave the listings out for you /wink").
In the year of Our Lord 2022 I really would not trust cloud encryption -strong or otherwise; at least not for me personally and my personal/hobby data. If I was working for a company that has a legal department with teeth behind me and I was storing things on the cloud for them? That would be a different ballgame.