PDA

View Full Version : KeePassX inside truecrypt volume



saj0577
April 14th, 2008, 02:05 AM
Is it worth keeping a KeePassX Database inside a truecrypt volume?

Saj

chewearn
April 14th, 2008, 03:50 AM
From KeePassX website:
"The complete database is always encrypted either with AES (alias Rijndael) or Twofish encryption algorithm using a 256 bit key."

Since Truecrypt uses at least this level of encryption, you are theoretically only doubling the data protection when you put KeyPassX encrypting inside the Truecrypt.

Of course, this discount any possible exploit/security hole yet to be discovered in these application. If a security hole is discovered and un-patched, your protection by that apps is zero. Then, it is beneficial to have two layer of encryption. But this is likely to be a remote possibility.

You have to decide whether the inconveniences of double encryption is worth it.

saj0577
April 14th, 2008, 09:45 AM
Okay cheers. :)

Saj