问题描述
我想加密一个二进制文件。我的目标是防止任何人读取没有密码的文件。哪个更好的解决方案，AES或者Blowfish具有相同的密钥长度？我们可以假设攻击者有很大的资源（软件，知识，金钱）来破解文件。
可能AES / AES。 Blowfish是Twofish的直接前身。 Twofish是Bruce Schneier参与制作AES的比赛。被认为比较逊于名为Rijndael的条目，这就是AES。有趣的是：在比赛的一个时刻，所有参赛者都被要求给出他们对密码排名的看法。每个团队都将自己的入场作为最好的选择可能并不奇怪，但是每个其他球队都选择了Rijndael作为第二名。
那就是说，有一些基本的差异在Blowfish与AES的基本目标中，可以（可以说）有利于Blowfish在绝对安全性方面。特别是，Blowfish尝试通过使初始密钥设置相当缓慢的操作来进行强力（关键耗尽）攻击。对于正常的用户来说，这并不重要（仍然不到一毫秒），但是如果您每秒尝试使用数百万个密钥来打破它，那么差异就相当大。
最后，我不认为这是一个主要的优势。我一般会推荐AES。我的下一个选择可能是Serpent，MARS和Twofish。 Blowfish会在那些之后的某个地方（虽然有一些其他人可能会推荐在Blowfish之前）。
I want to encrypt a binary file. My goal is that to prevent anyone to read the file who doesn't have the password.
Which is the better solution, AES or Blowfish with the same key length? We can assume that the attacker has great resources (softwares, knowledge, money) for cracking the file.
Probably AES. Blowfish was the direct predecessor to Twofish. Twofish was Bruce Schneier's entry into the competition that produced AES. It was judged as inferior to an entry named Rijndael, which was what became AES.
Interesting aside: at one point in the competition, all the entrants were asked to give their opinion of how the ciphers ranked. It's probably no surprise that each team picked its own entry as the best -- but every other team picked Rijndael as the second best.
That said, there are some basic differences in the basic goals of Blowfish vs. AES that can (arguably) favor Blowfish in terms of absolute security. In particular, Blowfish attempts to make a brute-force (key-exhaustion) attack difficult by making the initial key setup a fairly slow operation. For a normal user, this is of little consequence (it's still less than a millisecond) but if you're trying out millions of keys per second to break it, the difference is quite substantial.
In the end, I don't see that as a major advantage, however. I'd generally recommend AES. My next choices would probably be Serpent, MARS and Twofish in that order. Blowfish would come somewhere after those (though there are a couple of others that I'd probably recommend ahead of Blowfish).
这篇关于AES与Blowfish进行文件加密的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持！