I am quite new to encryption and recently played around with blowfish (openssl's implemenation).
I am using a 23 character password (case-sensitive alphanumeric random). I estimate the entropy to be roughly 128 Bit (-> wikipedia password strength).
My question would be: If someone would acquire my encrypted text, how long would it take him/her to bruteforce it? How would yout answer differ if it were a big player (three letter agencies...)
Also, blowfish seems to be quite old, Wikipedia states that Bruce Schneier would recommend twofish instead (though not available via openssl).
What does this mean and does it have any practical conseqeunces?
"Four rounds of Blowfish are susceptible to a second-order differential attack (Rijmen, 1997); for a class of weak keys, 14 rounds of Blowfish can be distinguished from a pseudorandom permutation (Vaudenay, 1996)." [src: https://en.wikipedia.org/wiki/Blowfish_%28cipher%29"]