What's the best way to encrypt files for cloud storage?

[Jeff7181]

Lets say, for example, that I want to store a copies of my tax returns and related documents in the cloud so if my house burned down or something I'd have that information elsewhere.

Assuming I don't want to rely on whatever cloud service's encryption, what's the best way to encrypt it? Is WinZip's 256-bit encryption with a very strong password enough or is there a better way?

 

[seepy83]

The 256-Bit AES encryption provided by WinZip should definitely be sufficient. Use a long, complex key that would be difficult to brute-force. Protect the key from being stolen. Don't re-use the key anywhere else.

 

[Jeff7181]

That's kinda what I figured. I just wasn't sure if there were any inherent vulnerabilities with WinZip that would make it less effective than another solution assuming the same encryption type and strong password. WinZip is an attractive solution because it's so common and can be used on pretty much any platform.

 

[Chiefcrowe]

It should be ok, but if you aren't sure you should try a complex encryption algorithm with Truecrypt.

 

[seepy83]

I'm seeing some articles on the web from 2004 claiming that cryptographers found vulnerabilities in WinZip's implementation of AES. Haven't had a chance to dive into the details yet. The NSA has a guide directing how files should be encrypted using WinZip, and it was last reviewed in 2009 (on this page: http://www.nsa.gov/ia/mitigation_guidance/security_configuration_guides/fact_sheets.shtml). I would bet my life that the NSA wouldn't be recommending its use if it had legitimate vulnerabilities discovered 5 years before that document was published.

 

[Chiefcrowe]

Another alternative would be to use 7zip's AES. That should be quite solid right?