On 8/14/2019 6:22 AM, Radosław Korzeniewski wrote:
Hello,
niedz., 11 sie 2019 o 14:35 Lauri Kiiski <[email protected]
<mailto:[email protected]>> napisał(a):
- Encrypt disks on the machines having these components: File
Daemon, Director, Catalog, Storage Daemon, Physical Media
Eeeee, I do not understand. What do you want to keep secret?
Did you know that a double encryption does not increase the security
level?
That is a bit inaccurate. It is equivalent to increasing the key size by
one bit. It has been used before, as in the case of 3DES (triple DES).
DES used a 56-bit key and eventually could be broken by brute force on a
simple PC, so as a stop-gap they applied the same 56-bit key algorithm
tree times, so increased the effective key size from 2^56 to 2^58. So it
generally isn't worth it, but it does increase security a little bit.
I think, though, that Lauri is referring to encrypt the metadata that is
stored unencrypted in a disk volume by somehow encrypting the whole disk.
_______________________________________________
Bacula-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/bacula-users
