TLDR: Which algorithm is safest if we exclude AES, Twofish, Serpent and Whirpool?
My threat model is archiving and backing up important and private files.
Files will be stored in many places including clouds, so count them as publicly accessible.
I plan to store them for the next upcoming 100+ years in the future. Of course, nobody can imagine what computers will look and work in 2100 - BUT at least I can try to mitigate security risks.
Super strong and random password is a sure thing.
So I encrypt those files with VeraCrypt using AES-Twofish-Serpent cascade, Whirpool as the hash.
But in case that someday a flaw will be found in any given algorithm or in its implementation (in VeraCrypt itself), I want to add an additional layer of protection - another software and another algorithm.
BCArchive seems like a great opinion. (Do you agree?)
"Compressed archive with strong encryption
BCArchive utilizes the following encryption algorithms, standards and specifications:
Symmetric algorithms: Rijndael (AES), Blowfish-256, Blowfish-448, IDEA, CAST5, GOST 28147-89, Triple DES Secure Hash Algorithms: SHA-256, SHA-1, MD5 and RIPEMD-160 Asymmetric (public/secret key pair) algorithms: RSA, ElGamal / Diffie-Hellman Specifications for public/secret key pair format: PKCS #12, X.509 PKCS #5 recommendations for the implementation of password-based cryptography RFC 2440 specifications for session keys encrypted by symmetric or public key encryption algorithms"
When I open advanced settings to modify it, I am given these options:
- Which algorithm/hash method mentioned above is best if we exclude AES, Twofish, Serpent and Whirpool?
- I think that in case of VeraCrypt AES-Twofish-Serpent is better than Serpent-Twofish-AES because the outermost encryption is strongest (AES will be the first layer needed to break - do I understand that correctly?). Do you agree? Please give me your opinions and do not say that it doesn't matter.
(And please, PLEASE, do not say this is overkill.)