From owner-freebsd-questions Fri Oct 9 15:04:47 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id PAA01594 for freebsd-questions-outgoing; Fri, 9 Oct 1998 15:04:47 -0700 (PDT) (envelope-from owner-freebsd-questions@FreeBSD.ORG) Received: from castor.chuck (lucy.bedford.net [206.99.145.182] (may be forged)) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id PAA01494 for ; Fri, 9 Oct 1998 15:04:31 -0700 (PDT) (envelope-from listread@bedford.net) Received: (from listread@localhost) by castor.chuck (8.8.8/8.8.8) id RAA26274; Fri, 9 Oct 1998 17:49:03 -0400 (EDT) (envelope-from listread) Message-Id: <199810092149.RAA26274@castor.chuck> Subject: Re: How to have a secure/encrypted backup? In-Reply-To: <199810070523.BAA28582@federation.addy.com> from Francisco Reyes at "Oct 7, 98 01:23:41 am" To: francisco@natserv.com Date: Fri, 9 Oct 1998 17:49:03 -0400 (EDT) Cc: questions@FreeBSD.ORG X-no-archive: yes X-Echelon: aerosol dispersal modalities Reply-to: djv@bedford.net From: "Woodchuck" X-Mailer: ELM [version 2.4ME+ PL38 (25)] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Francisco Reyes wrote: [Charset iso-8859-1 unsupported, filtering to ASCII...] > Is there a way to encrypt a backup going to tape? > > Prefer something that would work with dump, but any method would be > good. You ought to be able to put bdes(1) in the pipeline, like: tar czplf - / | bdes -k BigSeCreT >/dev/??? See the man page for bdes. I would imagine that any cipher that reads from stdin and writes on stdout will fill the bill. I'm guessing here, and the pipe is just a suggestion for a starting point for experimentation. There may be issues with streaming speed and/or blocking. Maybe adding a dd after the bdes could help that? Just guessing... It might be a useful and clever hack to add a switch to dump/restore to incorporate encryption. Note, in the example, BigSeCreT may appear in ps listings, etc. There are ways around that. Dave -- Will hack for cabbages! Every day is Groundhog Day! To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message