| * For how long must it be secure?
let's say for 10 years * Against whom must it be secured?
Everyone, including national agencies and organised crime. * What are your potential losses if it's broken?
A lot of money. * How can you be sure you've used a secure implementation?
No idea * What do you think the "strongest available crypto" currently is?
No idea, but I would guess someone has this answer * Can you be sure that the key will never be compromised?
No, but this is a separate problem, I assume here that the key is not compromised. * Where will you store the key?
Off-line * Do you need to send the key to someone else?
No. * Where will the encryption happen?
Locally. |
Once you can answer yes to:
<snip> How can you be sure you've used a secure implementation? No idea </snip>
Then you will be able to ascertain for yourself whether your encrypted data, placed in a publicly available location, is "Safe Enough", "Secure Enough" for your needs.
It would be naive to assume that any data placed somewhere, encrypted or not, is stored with a completely invulnerable method.
That having been said, one must rise to the occasion of determining how secure something needs to be, and then availing oneself of the means to achieve that level of security.
I hope that helps, but in reality, there really isn't a cut and dried YES|NO answer - only relative levels of reasonable assurance in securing your data and communications.