Hi Radosław, > It is not about a file size. All file metadata are unencrypted and > simply > available on the Bacula volume, so you can get it directly from volume > or > catalog.
Yes, that's for sure, and being this the scenario, I feel that the sparse file issue has a much lower relevance, at least from a security point of view. > It is about "Known plaintext attack". > I could be wrong about it and Bacula encryption could not be > susceptible to > this kind of attacks. I'm not a crypto professional at all, but my gut feeling is that expanding sparse files to their "theoretical" size before encrypting only makes this much worse, since you end up encrypting long sequences of zeros and providing the attacker with the easiest possible scenario to mount a known plaintext attack. Regards, Alberto > > best regards > -- > Radosław Korzeniewski > rados...@korzeniewski.net ------------------------------------------------------------------------------ Minimize network downtime and maximize team effectiveness. Reduce network management and security costs.Learn how to hire the most talented Cisco Certified professionals. Visit the Employer Resources Portal http://www.cisco.com/web/learning/employer_resources/index.html _______________________________________________ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users