0

Up to this point I was using physical hard drives for backups, typically using dm_crypt as mentioned here. If online storage is used instead, and the provider cannot be trusted how much should the security parameter of the encryption routine be increased (I'm always using an encrypted drive) so that recovering the contents becomes unfeasible.

This question approaches the same issues but considers the files to be encrypted by the backup provider and not the user.

Improve this question
8
  • 2
    What kind of online storage are you talking about?
    – Neil Smithline
    Commented Nov 28, 2015 at 21:55
  • 1
    If the provider cannot be trusted don't forget to consider the risks applicable to loss of access (either as a result of accidental deletion/corruption or malicious encryption that prevents you accessing your data).
    – R15
    Commented Nov 29, 2015 at 9:26
  • By "önline storage" I believe you intend "cloud storage". If this is correct, I recommend you edit your question.
    – JaimeCastells
    Commented Nov 29, 2015 at 12:44
  • 1
    Online vs offline is usually used to differentiate between storage that is accessible vs inaccessible. A hard drive plugged into the machine would be online, in other words. A hard drive disconnected and stored in a closet would be offline.
    – Xander
    Commented Jan 28, 2016 at 15:37
  • 1
    "mounted file system on a VPS" you're not planning on decrypting the fs remotely, are you? Because encryption only protects the data "at rest." Anyone working at the remote site could take a snapshot of the VPS while your drive is decrypted, for example. dm_crypt will only help if you're willing to copy the entire filesystem image locally, decrypt, add/update files, re-encrypt, and upload the image back to the provider.
    – user15392
    Commented Jan 28, 2016 at 18:12

1 Answer 1

Reset to default
1

If this is just about the bit length (and I couldn't find out anything about the Block Mode -- I'm just guessing "XTS") that you should use for AES (128, 192 or 256), then 128 bits should be enough.

Check keylength.com and put in a date far enough in the future for your needs.

Improve this answer

Not the answer you're looking for? Browse other questions tagged .