Re: Encrypted backups

2004-01-15 Thread Klaus Holler
On Tuesday 13 January 2004 17:17, Marcus Williams wrote: On 13/01/2004, Bill wrote: - make sure your kernel support encrypted loopback your encryption of choice - configure a crypto loop to your tape device losetup -e twofish /dev/loop0 /dev/nst0 Well, you learn a new thing every

Re: Encrypted backups

2004-01-15 Thread Bill Tompkins
On Thu, 2004-01-15 at 12:34, Klaus Holler wrote: Well, you learn a new thing every day. Never thought you could do that! What happens with media errors on the tape when you read it back? depends on the cipher mode you use: ... snip ... if using CBC (cipher block chaining mode) you will

Re: Encrypted backups

2004-01-15 Thread Klaus Holler
On Tuesday 13 January 2004 17:17, Marcus Williams wrote: On 13/01/2004, Bill wrote: - make sure your kernel support encrypted loopback your encryption of choice - configure a crypto loop to your tape device losetup -e twofish /dev/loop0 /dev/nst0 Well, you learn a new thing every

Re: Encrypted backups

2004-01-15 Thread Bill Tompkins
On Thu, 2004-01-15 at 12:34, Klaus Holler wrote: Well, you learn a new thing every day. Never thought you could do that! What happens with media errors on the tape when you read it back? depends on the cipher mode you use: ... snip ... if using CBC (cipher block chaining mode) you will

Re: Encrypted backups

2004-01-14 Thread danny
On Tue, Jan 13, 2004 at 10:19:12AM +, Marcus Williams wrote: I am investigating ways of producing encrypted backups. You may also want to look into aespipe at http://loop-aes.sf.net HTH, DaCa. -- Danny Cautaert, Zopista and Pythoneer using Adamantix, FreeBSD Debian Write me in Dutch

Re: Encrypted backups

2004-01-14 Thread danny
On Tue, Jan 13, 2004 at 10:19:12AM +, Marcus Williams wrote: I am investigating ways of producing encrypted backups. You may also want to look into aespipe at http://loop-aes.sf.net HTH, DaCa. -- Danny Cautaert, Zopista and Pythoneer using Adamantix, FreeBSD Debian Write me in Dutch

Encrypted backups

2004-01-13 Thread Marcus Williams
Hi - I am investigating ways of producing encrypted backups. Currently I use afio and gpg (via tob) with something like: afio -b 10240 -c 1000 -U -Z -P gpg -Q --symmetric -Q \ --passphrase-fd=3 -Q --no-verbose -Q --batch -Q --no-options \ -3 3 -o /dev/nst0 $FILELIST 3$PASSPHRASE where

Re: Encrypted backups

2004-01-13 Thread Marcus Williams
On 13/01/2004, [EMAIL PROTECTED] wrote: First of all, don't use the 'Z' option. GPG compresses itself and this would slow down the process a lot. I'm pretty sure the 'Z' option is needed - coupled with the 'P' option that tells afio to 'compress' using an external program that happens to be

Re: Encrypted backups

2004-01-13 Thread Alexander Neumann
Hi Marcus, * Marcus Williams [EMAIL PROTECTED] wrote: I am investigating ways of producing encrypted backups. Currently I use afio and gpg (via tob) with something like: Did you try duplicity? - Alexander signature.asc Description: Digital signature

Re: Encrypted backups

2004-01-13 Thread Marcus Williams
On 13/01/2004, Alexander Neumann wrote: Did you try duplicity? No - I just took a look at it though and I suspect that its not an option because it uploads the encrypted archive offsite. Not really an option on our ADSL line (we're talking about 60+Gb of data on a full backup) Thanks Marcus

RE: Encrypted backups

2004-01-13 Thread no . spam
First of all, don't use the 'Z' option. GPG compresses itself and this would slow down the process a lot. On 13-Jan-2004 10:19:12, Marcus Williams wrote: Hi - I am investigating ways of producing encrypted backups. Currently I use afio and gpg (via tob) with something like: afio -b

Re: Encrypted backups

2004-01-13 Thread Alexander Neumann
Hi Marcus, * Marcus Williams [EMAIL PROTECTED] wrote: On 13/01/2004, Alexander Neumann wrote: Did you try duplicity? No - I just took a look at it though and I suspect that its not an option because it uploads the encrypted archive offsite. Not really an option on our ADSL line (we're

Re: Encrypted backups

2004-01-13 Thread Marcus Williams
[I meant to send this to the list] On 13/01/2004, Alexander Neumann wrote: You are able to store the backup-files on a local disk... Yes, but then we lose the ability to take them offsite. Well, unless I then move them to a tape. Worth thinking about though. Thanks Marcus -- Marcus Williams

Re: Encrypted backups

2004-01-13 Thread Alexander Neumann
* [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: First of all, don't use the 'Z' option. GPG compresses itself and this would slow down the process a lot. Don't you have a working email-addres or are you trying to DoS the owner of please.de? $ host -t mx please.de please.de MX

Re: Encrypted backups

2004-01-13 Thread Alexander Neumann
Hi Marcus, * Marcus Williams [EMAIL PROTECTED] wrote: [I meant to send this to the list] Thanks. I was just writing a mail about honoring the Mail-Followup-To:-Header... ;) On 13/01/2004, Alexander Neumann wrote: You are able to store the backup-files on a local disk... Yes, but then we

Re: Encrypted backups

2004-01-13 Thread Marcus Williams
On 13/01/2004, Alexander Neumann wrote: * Marcus Williams [EMAIL PROTECTED] wrote: [I meant to send this to the list] Thanks. I was just writing a mail about honoring the Mail-Followup-To:-Header... ;) [snip] Sigh.. one of my wish list items for TheBat! is proper reply actions such as this.

Re: Encrypted backups

2004-01-13 Thread Bill
losetup -d /dev/loop0 It's kernel-side, very simple, and sould be fast enough... Bill Hi - I am investigating ways of producing encrypted backups. Currently I use afio and gpg (via tob) with something like: afio -b 10240 -c 1000 -U -Z -P gpg -Q --symmetric -Q \ --passphrase

Re: Encrypted backups

2004-01-13 Thread Marcus Williams
On 13/01/2004, Bill wrote: - make sure your kernel support encrypted loopback your encryption of choice - configure a crypto loop to your tape device losetup -e twofish /dev/loop0 /dev/nst0 Well, you learn a new thing every day. Never thought you could do that! What happens with media

Re: Encrypted backups

2004-01-13 Thread gz
Hi - I am investigating ways of producing encrypted backups. Currently I use afio and gpg (via tob) with something like: take a look at loop-aes and aespipe. http://loop-aes.sourceforge.net/loop-AES.README http://loop-aes.sourceforge.net/aespipe.README gaetano -- To UNSUBSCRIBE, email

Encrypted backups

2004-01-13 Thread Marcus Williams
Hi - I am investigating ways of producing encrypted backups. Currently I use afio and gpg (via tob) with something like: afio -b 10240 -c 1000 -U -Z -P gpg -Q --symmetric -Q \ --passphrase-fd=3 -Q --no-verbose -Q --batch -Q --no-options \ -3 3 -o /dev/nst0 $FILELIST 3$PASSPHRASE where

RE: Encrypted backups

2004-01-13 Thread no . spam
First of all, don't use the 'Z' option. GPG compresses itself and this would slow down the process a lot. On 13-Jan-2004 10:19:12, Marcus Williams wrote: Hi - I am investigating ways of producing encrypted backups. Currently I use afio and gpg (via tob) with something like: afio -b

Re: Encrypted backups

2004-01-13 Thread Alexander Neumann
Hi Marcus, * Marcus Williams [EMAIL PROTECTED] wrote: On 13/01/2004, Alexander Neumann wrote: Did you try duplicity? No - I just took a look at it though and I suspect that its not an option because it uploads the encrypted archive offsite. Not really an option on our ADSL line (we're

Re: Encrypted backups

2004-01-13 Thread Marcus Williams
[I meant to send this to the list] On 13/01/2004, Alexander Neumann wrote: You are able to store the backup-files on a local disk... Yes, but then we lose the ability to take them offsite. Well, unless I then move them to a tape. Worth thinking about though. Thanks Marcus -- Marcus Williams

Re: Encrypted backups

2004-01-13 Thread Marcus Williams
On 13/01/2004, Alexander Neumann wrote: Did you try duplicity? No - I just took a look at it though and I suspect that its not an option because it uploads the encrypted archive offsite. Not really an option on our ADSL line (we're talking about 60+Gb of data on a full backup) Thanks Marcus

Re: Encrypted backups

2004-01-13 Thread Alexander Neumann
Hi Marcus, * Marcus Williams [EMAIL PROTECTED] wrote: [I meant to send this to the list] Thanks. I was just writing a mail about honoring the Mail-Followup-To:-Header... ;) On 13/01/2004, Alexander Neumann wrote: You are able to store the backup-files on a local disk... Yes, but then we

Re: Encrypted backups

2004-01-13 Thread Bill
losetup -d /dev/loop0 It's kernel-side, very simple, and sould be fast enough... Bill Hi - I am investigating ways of producing encrypted backups. Currently I use afio and gpg (via tob) with something like: afio -b 10240 -c 1000 -U -Z -P gpg -Q --symmetric -Q \ --passphrase

Re: Encrypted backups

2004-01-13 Thread Marcus Williams
On 13/01/2004, Alexander Neumann wrote: * Marcus Williams [EMAIL PROTECTED] wrote: [I meant to send this to the list] Thanks. I was just writing a mail about honoring the Mail-Followup-To:-Header... ;) [snip] Sigh.. one of my wish list items for TheBat! is proper reply actions such as this.

Re: Encrypted backups

2004-01-13 Thread Alexander Neumann
* [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: First of all, don't use the 'Z' option. GPG compresses itself and this would slow down the process a lot. Don't you have a working email-addres or are you trying to DoS the owner of please.de? $ host -t mx please.de please.de MX

Re: Encrypted backups

2004-01-13 Thread Marcus Williams
On 13/01/2004, Bill wrote: - make sure your kernel support encrypted loopback your encryption of choice - configure a crypto loop to your tape device losetup -e twofish /dev/loop0 /dev/nst0 Well, you learn a new thing every day. Never thought you could do that! What happens with media

Re: Encrypted backups

2004-01-13 Thread Alexander Neumann
Hi Marcus, * Marcus Williams [EMAIL PROTECTED] wrote: I am investigating ways of producing encrypted backups. Currently I use afio and gpg (via tob) with something like: Did you try duplicity? - Alexander signature.asc Description: Digital signature

Re: Encrypted backups

2004-01-13 Thread gz
Hi - I am investigating ways of producing encrypted backups. Currently I use afio and gpg (via tob) with something like: take a look at loop-aes and aespipe. http://loop-aes.sourceforge.net/loop-AES.README http://loop-aes.sourceforge.net/aespipe.README gaetano