swa66 - 5:30 pm on Feb 13, 2008 (gmt 0) Public not custom wins the test of time.
With custom encryption, that would bolt the door pretty darn tight.
This is wrong. Standard scrutinized encryption is the best path forward. Custom (read not scrutinized) encrpytion always fails. Using something like AES is the path forward, not inventing your own.
Take a look at the competition to win AES: extremely bright minds participated, about half of the entries got withdrawn by their creators after the scrutiny of their colleagues pointed out drawbacks.
Most banks do not employ a top-10 crypto-analyst, even Microsoft with all their cash to throw about cannot make a secret encryption algorithm that actually faces the test of time.
Custom encryption seems to always fail scrutiny by those who know more.
Public not custom wins the test of time.