信唔過bitlocker既贊成用opensource既Veracrypt
btw, AES 128Bits同256Bits無咩分別
佢crack到128bits既話256bits都應該可以用同樣方法crack
http://www.axantum.com/AxCrypt/etc/seagate128vs256.pdf
• NIST1
has, in the reference document,
concluded and recommended that all three
key-lengths (128-bit, 192-bit and 256-bit) of
AES provide adequate encryption until beyond
calendar year 2031.
• NIST’s recommendation above includes the
threat model not only of predicting the key, but
also of cracking the encryption algorithm. The
difference between cracking AES-128 algorithm
and AES-256 algorithm is considered minimal.
Whatever breakthrough might crack 128-bit will
probably also crack 256-bit.