Ideally, you will not be at the encryption level to protect your data. If nothing else, use an existing, trusted secure infrastructure such as GPG to handle file encryption. This is related to your question regarding AES: you did not even indicate which encryption modes you are considering (CBC, XTR, CTR, CFB, EBC, etc.).
source
share