{"id":1512,"date":"2020-04-13T11:01:17","date_gmt":"2020-04-13T11:01:17","guid":{"rendered":"https:\/\/sectigostore.com\/page\/?p=1512"},"modified":"2021-09-01T09:39:59","modified_gmt":"2021-09-01T09:39:59","slug":"what-is-128-bit-encryption","status":"publish","type":"post","link":"https:\/\/sectigostore.com\/page\/what-is-128-bit-encryption\/","title":{"rendered":"What Is 128 Bit Encryption? Should I Avoid 128 Bit SSL Encryption?"},"content":{"rendered":"\n

If you\u2019re a website owner who\u2019s been worrying endlessly about encryption strengths and whether to opt for a 128 bit encryption or 256-bit encryption<\/a>, you\u2019ve just got to read on to ease your nerves! For our other tech-savvy readers, concerned about accessing insecure websites, we\u2019ll look at if a 128 bit SSL encryption standard can be adopted with reasonable safety. <\/p>\n\n\n\n

\n

PositiveSSL EV Certificates from $79.84\/year!<\/h2>\n

Get the lowest prices on trusted SSL\/TLS certificates from Sectigo brands.<\/p>\nShop for Sectigo SSL Certificates<\/a>\n<\/div>\n\n\n\n

When it comes to choosing the right encryption strength in terms of a digital certificate, most sellers offer up to 256-bit encryption. Still, the actual encryption level that\u2019s utilized to secure your data depends on a bunch of other factors. <\/p>\n\n\n\n

Let\u2019s take a look at how encryption comes into play as you surf the internet, shop on Amazon, or engage in other financial transactions.<\/p>\n\n\n\n

What Is 128 Bit AES<\/h2>\n\n\n\n

A 128 bit advanced encryption system (AES) is a technique of encrypting sensitive data using session key that is 128 bit long. This national security agency (NSA) approved encryption protocol uses symmetric encryption to convert plain text into encrypted text by using ten transformation rounds.<\/p>\n\n\n\n

What Happens Behind the Scenes When You Access a Website <\/h2>\n\n\n\n

Every time your web browser (Chrome, Firefox, etc.) talks to the server where the website is hosted, a three-way handshake occurs in the background followed by an SSL handshake if you\u2019re trying to access the site over HTTPS. <\/p>\n\n\n\n

\"TLS<\/figure><\/div>\n\n\n\n

Without getting into the details of how an SSL\/TLS handshake works (that\u2019s another topic for another day), in the image above, we can see some form of negotiation happening between the server and the client where they tell one another the standards and protocols supported on each end. These negotiations determine the best possible standards and protocols to use. Then, once that\u2019s decided, we proceed with bulk data transfer. <\/p>\n\n\n\n

In simple terms, even if you were to choose a certificate that supports up to 256-bit encryption, the outcome is dependent on these negotiations and the default server configurations. For all you know, you could end up with 128 bit encryption or significantly less encryption strength if the server you\u2019re connecting to still supports outdated ciphers and its configuration settings have not been updated, or if your browser has not been updated. <\/p>\n\n\n\n

This means that it\u2019s better to choose a 256 bit encryption certificate and check your server configuration settings \u2014 as well as you browser \u2014 to ensure they both support it. <\/p>\n\n\n\n

Do I Have 128 Bit Encryption & How Do I Know<\/h2>\n\n\n\n

A 128 bit encryption describes the length of the key (128 bit) to encrypt the data transferred on an untrusted network. 128 bit encryption is used in encryption protocols including AES and SSL\/TLS. Although 128 bit encryption is not yet obsolete, a more secure 256 bit encryption is widely used in modern protocols.<\/p>\n\n\n\n

If you don\u2019t know if you have 128 bit encryption or 256 bit encryption, you can check it on your SSL certificate. You can click on the padlock icon on your website and click on \u201cCertificate (Valid)\u201d. Go to the \u201cDetails\u201d section and check your \u201cSignature Algorithm\u201d. It describes the length of the key used to encrypt your online conversation. If you have sha128RSA, it means you have 128 bit encryption.<\/p>\n\n\n\n

How Secure Is 128 Bit Encryption<\/h2>\n\n\n\n

If you are brooding, \u201cHow secure is 128 bit encryption?\u201d, the sincere answer is it is very secure.<\/p>\n\n\n\n

A 128 bit encryption has 2128 <\/sup>combinations of keys if a criminal uses a brute force attack. On the other hand, a 256 bit encryption is many times more secure than 128 bit encryption. A 256 bit encryption has 2128 <\/sup>more keys than 128 bit encryption.<\/p>\n\n\n\n

So, What\u2019s 128 Bit Encryption Mean Anyway?<\/strong><\/h2>\n\n\n\n

When we talk about 128 bit encryption, the \u201c128\u201d refers to the length of the key that\u2019s used to encrypt your data. What this really means is that to crack the encryption key, an attack would need to brute-force up to 2128<\/sup> possible combinations to decrypt your data.<\/p>\n\n\n\n

Obviously, while 2128<\/sup> might be a near-impossible number for humans to handle, computers can process information a lot faster. However, it would take approximately 885 quadrillion<\/em> years for the most powerful supercomputer (as of 2017) to brute force a 128-bit AES key.<\/p>\n\n\n\n

Here are a few key size examples and the amount of time it would take to crack each of them: <\/p>\n\n\n\n\n \n \n \n
\n Key Size<\/strong>\n <\/th>\n Time Required to Crack<\/strong>\n <\/th><\/tr>\n
56-bit<\/td>\n 399 seconds<\/td>\n <\/tr>\n
128-bit<\/td>\n 1.02 x 1018 years<\/td>\n <\/tr>\n
192-bit<\/td>\n 1.872 x 1037 years<\/td>\n <\/tr>\n
256-bit<\/td>\n 3.31 x 1056 years<\/td>\n <\/tr>\n \n \n <\/tbody><\/table>\n\n\n\n

128 Bit Vs 256 Bit Encryption<\/h2>\n\n\n\n

128 bit encryption uses a 128 bit long symmetric key, while a 256 bit encryption uses 256 bit long symmetric key. Mathematically speaking, 256 bit key is 2128 <\/sup>times longer than the 128 bit key, and thus, it\u2019s much more difficult to crack. Therefore, in 128 bit vs. 256 bit encryption, the  apparent winner is 256 bit encryption. However, given the present computing rates, 128 bit encryption is also very difficult to crack.<\/p>\n\n\n\n

The bottom line here is that while 128 bit SSL encryption will take less time to crack than 256-bit encryption, it\u2019s still reasonably safe to use. Having said that, these are all contingent on AES being implemented correctly, with sufficient entropy, and without falling victim to side-channel attacks, insecure passwords, etc.<\/p>\n\n\n\n

Encryption Resources<\/h3>\n\n\n\n