How secure is encryption?

Question

Let me preface this by saying I know nothing about encryption. I understand the basic concept of public key / private key encryption but I don't how easily it can be broken, if at all. If one were to believe the movies, encrypted data can be broken by a teenager with a decent computer in a few hours.

I have a client who wants credit card information sent via email - encrypted of course, but I'm still not feeling terribly good about the idea. I feel it would be safer to store the info on the VPS, but even then its an unmanaged server and there's nobody watching it who knows much about security.

So can anyone tell me if there's a safe way to store and/or send this data out?

Thanks

Answer 1

It's not practical to break a decent encryption scheme. It is much more likely that someone will get a copy of the keys. Public key has the advantage that the decryption key doesn't have to be on the server at all... can't compromise it at that end if it is never there.

However... this is credit card data. There are legally enforceable standards for how you should handle that data, so you really better look up what they say. The standards mandate certain kinds of encryption, as well as various other security practices.