Re: Problems with restore
Miek Gieben <[email protected]> Fri, 7 Oct 2005 10:10:35 +0200
| Newsgroups | gmane.comp.sysutils.backup.hdup.general |
|---|---|
| Message-ID | <[email protected]> |
--===============0998826050== Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="LKTjZJSUETSlgu2t" Content-Disposition: inline --LKTjZJSUETSlgu2t Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable [On 07 Oct, @10:01, Ondra Kudlik wrote in "Re: [hdup-user] Problems with .= =2E."] > > And then another question. I'm going to encrypt the backups, so which o= ne should > > I use, gpg or mcrypt? And if mcrypt, which cipher? I not too paranoid, = but I want > > something more secure than just plain files. Performance should be reas= onable, too, > > as I've got some low end hardware :) >=20 > Here is also my question. I'm encrypting with gpg for now, but my > backups are about 11GB and more and when I want to restore some > file, it is very very very slow :) gpg encrypts using pub/priv key stuff - which is slow, a shared secret (ie. using mcrypt) is much faster. If you read RFC 3766 (Determining Strengths For Public Keys Used For Exchanging Symmetric Keys) you may get an idea of how large your symmetric key should be. > I'm paranoid :) so I need some strong encryption, main reason is > that if I put my backups on some disks and somebody steal them, I > don't want him to encrypt it... symmetric keys aren't less secure then pub/priv encryption. Just use a shared secret of a few hundred bits and something like blowfish and you should be find. oh btw, you should never trust any crypto advise you get :-) > But paranoid is one side and speed of recovery second :) So is there > any good compromise? Are there some benchmarks? I don't know of any benchmarks in this area, -- grtz, - Miek http://www.miek.nl http://www.nlnetlabs.nl (new) PGP Key ID: 0x3880D0F6 (new) fingerprint: 6A3C F450 6D4E 7C6B C23C F982 258B 85CF 3880 D0F6 --LKTjZJSUETSlgu2t Content-Type: application/pgp-signature; name="signature.asc" Content-Description: Digital signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.1 (GNU/Linux) iD8DBQFDRi17JYuFzziA0PYRAglPAJ4wb9ZngxHSxCVuPR2hWmB9EsgXxACePnOw s9rI9W9bMHU3b+5Q+71ldf0= =FgZU -----END PGP SIGNATURE----- --LKTjZJSUETSlgu2t-- --===============0998826050== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ hdup-user mailing list [email protected] http://atoom.net/cgi-bin/mailman/listinfo/hdup-user --===============0998826050==--