[Qt-interest] QCA big string encryption

[Ross Driedger]

On 24-Apr-11, at 5:52 PM, Nicholas Shatokhin wrote:

> I use SSL, but I must be sure that the system is completely safe (it  
> can
> send a very confidential data). So I'm trying to add additional  
> encryption.

No system is 'completely safe'.  It is possible that SSL's asymmetric  
algorithm could be broken tomorrow (just like any other encryption  
scheme), highly unlikely but millions of transactions worth billions  
of dollars are made every day using SSL.

As far as we can tell, security issues with SSL are more related to  
infrastructure and server security, not so much the algorithm.

If you are considering 'encrypting twice' with two different  
algorithms, that really doesn't add much.  I would suggest that you  
use the Qt implementation of secure sockets and ensure that your  
server security is solid.


-- 
"Sometimes I think the surest sign that intelligent life exists  
elsewhere in the universe is that none of it has tried to contact us."
Bill Waterson (Calvin & Hobbes)

Ross Driedger