I wish to encrypt potentially gigabytes of data on my pc, and I wish to be able to decrypt and use those files.
However, I am a noob, so bear with me.
My idea is to use
openSSL to encrypt files with
AES-256bit-CTR, since it's fast.
I imagine I'd be using a super long password (at least 20 chars), I'd use the same salt and password for every individual file for speed.
My questions are:
- How to make my encrypted files as secure as possible? What arguments to provide in OpenSSL?
- Would I be safe if I were to use a 20-30 letter password?
- How to use a random IV? What argument to provide in openssl? (AFAIK openssl derives an IV based on the password, so if the pw is secure am I good?)
What should my openssl command look like for max security? This is mine right now:
openssl.exe enc -in secret.txt -e -aes-256-ctr -out something.txt -k securepass -salt