Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Currently, I am using Symantec's PGP desktop whole disk encryption for my Mac. After hearing that FileVault was insecure and supposedly easily crackaable.

However, PGP has been around for a long time, and I've hear rumours that the NSA has backdoors to all of the main encryption methods (could likely be horse-dookey), but with a supercomputer like this, who needs a backdoor?

Is PGP safe against a behemoth like this?

Is there anything better nowadays, which is practical to use for basics like securing a text file, disk, or email (Not in research / academic phases)?

share|improve this question

closed as not constructive by Jeff Ferland Jan 18 '13 at 23:50

As it currently stands, this question is not a good fit for our Q&A format. We expect answers to be supported by facts, references, or expertise, but this question will likely solicit debate, arguments, polling, or extended discussion. If you feel that this question can be improved and possibly reopened, visit the help center for guidance.If this question can be reworded to fit the rules in the help center, please edit the question.

PGP is still widely used, the benefit of PGP is not only encryption but also allows you to proof the authenticity or legitimacy of a file (you can sign the file). If you only want encryption than I suggest using AES. Truecrypt for instance can encrypt files or disks, but it doesn't provide the proof of authenticity that PGP does.

Also check this: It explains how long this would take, even with a supercomputer.

share|improve this answer
I heard the NSA could pop PGP like a grapefruit? – Zippy Zeppoli Jan 18 '13 at 23:00
So you have ample documentation about this? Also what documents or files are you keeping that are interesting to the NSA? – Lucas Kauffman Jan 18 '13 at 23:05
Not to mention there are plenty of ways to get the data without breaking the encryption, usually it's easier to either get the user to use your encryption keys, or get the user to give the key/access to the data. This is why good key management is important, and I haven't gone into what can be done with physical access yet. – ewanm89 Jan 18 '13 at 23:28
@LucasKauffman Do you think they'd spend $2 billion on a new datacenter if it couldn't? – Zippy Zeppoli Jan 18 '13 at 23:59
If you don't trust symantec, why use their software? Do you trust your motherboard manufacturer to not include backdoors through the firmware? – Lucas Kauffman Jan 19 '13 at 1:01

Not the answer you're looking for? Browse other questions tagged or ask your own question.