i have googled and searched quite alot but most things just state the same things but not answering my questions so hopefully you guys can help me out abit
Story: i am looking at creating an encryption software for my self and friends to encrypt messages & files with AES 256 (in java)
Serval other softwares using AES 256 encryption support any key length such as a 10char insted of the 16. how is that possible (such as winzip's aes encryption)?
the same way the other way. how can the encryption depend on the key strength when the key has to be 16 chars what i was thinking was if the passharse was less than 16 then fill the remaining chars with a predefined seed if the passharse was longer than 16 then use the overlapping chars as a salt.
am i missing something completely? how can the encryption strength be based on how good the passharse is when its required to be 16 chars regardless
how would i go about securely using AES256 yet still beable to encrypt other peoples files (who uses the same software)
and last question is there anyway to notice what type of encryption is used? do they have a patten that can be seen in the hex ? would having multiple encryption types (with same passharse or predefined modification) do any good?
NSA has stated they can crack nearly anything with a farm of super computers is a 16 char passharse really that hard to brute with a datacenter full of super computers