First off, please let me explain why I'm asking this at all:
The default implementation of EnvelopedCms is using AlgorithmIdentifier which by itself will use
RSA_DES_EDE3_CBC or OID
1.2.840.113549.3.7 as encryption algorithm. Many tools using EnvelopedCms seem to just copy & paste example code. Now I don't know about you but in 2017, when I read DES, I think "not safe". Maybe I'm wrong at this point already, DES atleast still is used here and there, but the last time I checked the recommandation was to rather use more advanced block ciphers such as AES.
Now for my question(s):
- Is RSA_DES_EDE3_CBC still "secure" enought? When I ask this I mean like is it secure enough for the next few years, since a typical user doesn't want to re-encrypt files every year. For the sake of the discussion let's just assume Moore's law and ignore any unforeseen breakthrough e.g. quantum computing.
- If not, as I presume (see title), what OID would be a better pick when using EnvelopedCms? Perhaps OID 2.16.8220.127.116.11.4.1.42 (is this even a correct block cipher OID?) or something even more advanced? And most important: where can I find a list of OIDs / FriendlyNames supported by AlgorithmIdentifier?