IIRC - the library (OpenSSL) supports these encryption algorithms,  but
the bacula-encryption code needs to be written.
[non-programmer] In principle, it would not be hard to implement, all is
needed is the right "call" to the openssl and config options in Bacula
[\non-programmer]

That aside - What are the business/technical reasons for using bf?
Speed-wise it is a wash, probably depends on a library more than
anything else. Security-wise - AES is "better". Both algorithms are
"open"...
Blowfish was a fine answer to 3DES, but it is not on the same playing
field as AES and Twofish.

# openssl speed aes-128-cbc bf-cbc
The 'numbers' are in 1000s of bytes per second processed.
type             16 b       64 b       256 b      1024 b       8192 b
blowfish cbc     91461.62k  97600.49k  99258.20k  99444.35k    99784.02k
aes-128 cbc      46126.84k  82429.31k 104437.03k 111145.50k   112984.28k

Vladimir

Chris Howells wrote:
> Hi,
> 
> According to the manual bacula supports encryption using Blowfish, 
> although I am having trouble working out how to make Bacula use this, 
> rather than the standard, which appears to be AES.
> 
> The manual states:
> 
> " the back-end implementation currently supports:
> 
> Symmetric Encryption:
>      - 128, 192, and 256-bit AES-CBC
>      - Blowfish-CBC"
> 
> However the source says:
> 
> src/dird/inc_conf.c:   {"blowfish", INC_KW_ENCRYPTION,    "B"},   /* 
> ***FIXME*** not implemented */
> 
> So the manual seems to say it should work, the source seems to state 
> that it doesn't. Which is correct? And if blowfish is supported, how do 
> I make it use blowfish instead of AES ?
> 
> Thanks.
> 
> -------------------------------------------------------------------------
> This SF.net email is sponsored by: Splunk Inc.
> Still grepping through log files to find problems?  Stop.
> Now Search log events and configuration files using AJAX and a browser.
> Download your FREE copy of Splunk now >> http://get.splunk.com/
> _______________________________________________
> Bacula-devel mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/bacula-devel
> 


-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/
_______________________________________________
Bacula-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/bacula-devel

Reply via email to