Whenever you encrypt something, you’re making a bet. The wager is that the key holds for at least as long as the data matters – for a session cookie, that’s minutes. You’ll win the bet every time. For more sensitive information – a patient record, a sealed court filing, a firmware signing key, or the trade secret at the center of your business – the horizon is ten, twenty, thirty years. by Eric Mann