About this subject, checkout the latest cryptogram:

http://www.schneier.com/crypto-gram-0805.html#3

As usual, Bruce Schneier has solid advice.