[clug] Neat Backup Solutions for desktops...

[Sam Couter]

Daniel Pittman <daniel at rimspace.net> wrote:
> "Alastair D'Silva" <alastair at newmillennium.net.au> writes:
> 
> > One problem with streaming encryption is that if you have any data
> > corruption, data from that point on is lost.
> 
> Most of the encrypting done via a pipe is "streaming" only by choice, because
> you selected an inappropriate feedback mode.  You could use a mode like ECB
> that trades off some types of security in return for per-block protection.

What he said.

Also, compression usually has the same risk, where the compressed stream
is invalid after the corrupted byte.

In Amanda's case, each filesystem is compressed and encrypted
separately, so other filesystems on the same media won't be corrupted by
one stray cosmic ray.
-- 
Sam Couter         |  mailto:sam at couter.id.au
OpenPGP fingerprint:  A46B 9BB5 3148 7BEA 1F05  5BD5 8530 03AE DE89 C75C
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 198 bytes
Desc: Digital signature
URL: <http://lists.samba.org/pipermail/linux/attachments/20091208/8dd02ef7/attachment.pgp>