Home/ Questions/Q 46081
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-10T15:54:36+00:00

I’m considering the following: I have some data stream which I’d like to protect

  • 0

I’m considering the following: I have some data stream which I’d like to protect as secure as possible — does it make any sense to apply let’s say AES with some IV, then Blowfish with some IV and finally again AES with some IV?

The encryption / decryption process will be hidden (even protected against debugging) so it wont be easy to guess which crypto method and what IVs were used (however, I’m aware of the fact the power of this crypto chain can’t be depend on this fact since every protection against debugging is breakable after some time).

I have computer power for this (that amount of data isn’t that big) so the question only is if it’s worth of implementation. For example, TripleDES worked very similarly, using three IVs and encrypt/decrypt/encrypt scheme so it probably isn’t total nonsense. Another question is how much I decrease the security when I use the same IV for 1st and 3rd part or even the same IV for all three parts?

I welcome any hints on this subject

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. I’m not sure about this specific combination, but it’s generally a bad idea to mix things like this unless that specific combination has been extensively researched. It’s possible the mathematical transformations would actually counteract one another and the end result would be easier to hack. A single pass of either AES or Blowfish should be more than sufficient.

    UPDATE: From my comment below…

    Using TripleDES as an example: think of how much time and effort from the world’s best cryptographers went into creating that combination (note that DoubleDES had a vulnerability), and the best they could do is 112 bits of security despite 192 bits of key.

    UPDATE 2: I have to agree with Diomidis that AES is extremely unlikely to be the weak link in your system. Virtually every other aspect of your system is more likely to be compromised than AES.

    UPDATE 3: Depending on what you’re doing with the stream, you may want to just use TLS (the successor to SSL). I recommend Practical Cryptography for more details—it does a pretty good job of addressing a lot of the concerns you’ll need to address. Among other things, it discusses stream ciphers, which may or may not be more appropriate than AES (since AES is a block cipher and you specifically mentioned that you had a data stream to encrypt).

    • 0