I'm looking for a way for Alice to send a message or a file to Bob in the most paranoid way possible (over the internet).
It can be asymmetric or symmetric. But According to some articles, AES 128bit, RSA, ECC are all broken or will be soon (with the new NSA Utah center).
I found PHPECC library on GitHub: https://github.com/mdanter/phpecc but I don't know how to generate private keys and change key length.
RSA is slow to get a decent security... AKA 2048-bit or more.
AES-256bit is fast and secure with a strong password... but I cannot figure how to communicate the password in the most paranoid way. (Again, please, not on a piece of paper :))
I've made a couple of schemas on a sheet, but I'm sure there's a better way than what I've imagine.
Any help or explanation, or good methods how to do that will be greatly appreciate.
OpenSSL Vulnerability: http://www.theregister.co.uk/2010/03/04/severe_openssl_vulnerability/
NSA is promoting ECC over RSA. And ECC 112-bit is broken: http://www.nsa.gov/business/programs/elliptic_curve.shtml