Re: Any backup solutions that offer password protected tapes?

On Fri, 13 Jan 2006 12:01:41 -0800, tonij67 wrote:

> Turns out we are persuing a "cheap" alternative here. By that I mean,
> backing up to disk then encrypting the data using something like GPG on
> tape.

My homegrown cheap alternative uses star and aespipe.

star lets you specify a compress-program as an option.

I specify a script which pushes everything through an AES written in
assembler for x86 and uses a key file.

The key file I use is on the system for the dump scripts to read.
(I assume your data is not encrypted on disk, so it's ok to leave
the key there in PT also, any suspicion of intrusion you just revoke the
backup keys and build a new set, so future backups cannot be comp'ed from
a previously stolen keyfile, probl' better with certs i'm sure)

I have the key backed-up on a pen drive and a remote system both gpg
encrypted with a decent pass phrase.

I also keep the scripts needed to restore the dumps external to
the backup ... in plain text obviously.

backing up 1G on a P3-500 to CD images is no drama.

look at aespipe which comes with loop-aes specifically the script:
bz2aespipe which I modified to use a symmetric key instead of pw


http://sourceforge.net/projects/loop-aes/
http://developer.berlios.de/projects/star

Rob
.

Quantcast