Up to this point I was using physical hard drives for backups, typically using dm_crypt as mentioned here. If online storage is used instead, and the provider cannot be trusted how much should the security parameter of the encryption routine be increased (I'm always using an encrypted drive) so that recovering the contents becomes unfeasible.

This question approaches the same issues but considers the files to be encrypted by the backup provider and not the user.

  • 2
    What kind of online storage are you talking about? Nov 28, 2015 at 21:55
  • 1
    If the provider cannot be trusted don't forget to consider the risks applicable to loss of access (either as a result of accidental deletion/corruption or malicious encryption that prevents you accessing your data).
    – R15
    Nov 29, 2015 at 9:26
  • By "önline storage" I believe you intend "cloud storage". If this is correct, I recommend you edit your question. Nov 29, 2015 at 12:44
  • 1
    Online vs offline is usually used to differentiate between storage that is accessible vs inaccessible. A hard drive plugged into the machine would be online, in other words. A hard drive disconnected and stored in a closet would be offline.
    – Xander
    Jan 28, 2016 at 15:37
  • 1
    "mounted file system on a VPS" you're not planning on decrypting the fs remotely, are you? Because encryption only protects the data "at rest." Anyone working at the remote site could take a snapshot of the VPS while your drive is decrypted, for example. dm_crypt will only help if you're willing to copy the entire filesystem image locally, decrypt, add/update files, re-encrypt, and upload the image back to the provider.
    – user15392
    Jan 28, 2016 at 18:12

1 Answer 1


If this is just about the bit length (and I couldn't find out anything about the Block Mode -- I'm just guessing "XTS") that you should use for AES (128, 192 or 256), then 128 bits should be enough.

Check keylength.com and put in a date far enough in the future for your needs.

Not the answer you're looking for? Browse other questions tagged .