On 8/14/2019 6:22 AM, Radosław Korzeniewski wrote:
Hello,
niedz., 11 sie 2019 o 14:35 Lauri Kiiski <lauri.kii...@iki.fi
<mailto:lauri.kii...@iki.fi>> napisał(a):
- Encrypt disks on the machines having these components: File
Daemon, Director, Catalog, Storage Daemon, Physical Media
Eeeee, I do not understand. What do you want to keep secret?
Did you know that a double encryption does not increase the security
level?
That is a bit inaccurate. It is equivalent to increasing the key size by
one bit. It has been used before, as in the case of 3DES (triple DES).
DES used a 56-bit key and eventually could be broken by brute force on a
simple PC, so as a stop-gap they applied the same 56-bit key algorithm
tree times, so increased the effective key size from 2^56 to 2^58. So it
generally isn't worth it, but it does increase security a little bit.
I think, though, that Lauri is referring to encrypt the metadata that is
stored unencrypted in a disk volume by somehow encrypting the whole disk.
_______________________________________________
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users
