Waraxe IT Security Portal

lenny · Valuable expert

Hey all!
So I know im usually the one answering questions - but this time I have a question for everybody else!

Right, so Im building a secure online service (more about this in the near future....) - dosen't matter about the details exactly right now, but it will involve the storage of sensitive data. I am using the Mcrypt functionality of PHP to encrypt the data before it is stored, so here is my question:
For sensitive information, what Mcrypt cipher algorithm should I be using?

Performance is not an issue, I would prefer high strength over performance. I understand obviously that the data is only as secure as my physical security procedures, but I'm not worried about that. What Im looking for is the theoretical most secure algorithm.

Any suggestions? Currently i'm leaning towards Blowfish.

There is a list of available ciphers here: http://uk2.php.net/manual/en/mcrypt.ciphers.php

waraxe · Site admin

AES-256 (MCRYPT_RIJNDAEL_128 with 256-bit key) is fine for most needs, just my $0.02 Smile

http://www.chilkatsoft.com/p/php_aes.txt

lenny · Valuable expert

Thanks for the fast response Smile

I think I'll start the project using AES-256, If anybody else has any comments they would be greatly appreciated!