Re: Problems with restore

Miek Gieben <[email protected]> Fri, 7 Oct 2005 10:10:35 +0200
Newsgroups gmane.comp.sysutils.backup.hdup.general
Message-ID <[email protected]>
--===============0998826050==
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature"; boundary="LKTjZJSUETSlgu2t"
Content-Disposition: inline


--LKTjZJSUETSlgu2t
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

[On 07 Oct, @10:01, Ondra Kudlik wrote in "Re: [hdup-user] Problems with  .=
=2E."]
> > And then another question. I'm going to encrypt the backups, so which o=
ne should
> > I use, gpg or mcrypt? And if mcrypt, which cipher? I not too paranoid, =
but I want
> > something more secure than just plain files. Performance should be reas=
onable, too,
> > as I've got some low end hardware :)
>=20
> Here is also my question. I'm encrypting with gpg for now, but my
> backups are about 11GB and more and when I want to restore some
> file, it is very very very slow :)

gpg encrypts using pub/priv key stuff - which is slow, a shared
secret (ie. using mcrypt) is much faster. If you read RFC 3766
(Determining Strengths For Public Keys Used For Exchanging Symmetric
Keys) you may get an idea of how large your symmetric key should be.

> I'm paranoid :) so I need some strong encryption, main reason is
> that if I put my backups on some disks and somebody steal them, I
> don't want him to encrypt it...

symmetric keys aren't less secure then pub/priv encryption. Just use
a shared secret of a few hundred bits and something like blowfish
and you should be find.

oh btw, you should never trust any crypto advise you get :-)

> But paranoid is one side and speed of recovery second :) So is there
> any good compromise? Are there some benchmarks?

I don't know of any benchmarks in this area,

--
grtz,
  - Miek

 http://www.miek.nl                            http://www.nlnetlabs.nl
 (new) PGP Key ID: 0x3880D0F6
 (new) fingerprint: 6A3C F450 6D4E 7C6B C23C  F982 258B 85CF 3880 D0F6

--LKTjZJSUETSlgu2t
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFDRi17JYuFzziA0PYRAglPAJ4wb9ZngxHSxCVuPR2hWmB9EsgXxACePnOw
s9rI9W9bMHU3b+5Q+71ldf0=
=FgZU
-----END PGP SIGNATURE-----

--LKTjZJSUETSlgu2t--

--===============0998826050==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
hdup-user mailing list
[email protected]
http://atoom.net/cgi-bin/mailman/listinfo/hdup-user

--===============0998826050==--