is currently considered to be strong by experts in the field, and use well-tested
implementations. As with all cryptographic mechanisms, the source code should be
available for analysis.
For example, US government systems require FIPS 140-2 certification.