0

Up to this point I was using physical hard drives for backups, typically using dm_crypt as mentioned here. If online storage is used instead, and the provider cannot be trusted how much should the security parameter of the encryption routine be increased (I'm always using an encrypted drive) so that recovering the contents becomes unfeasible.

This question approaches the same issues but considers the files to be encrypted by the backup provider and not the user.

  • 2
    What kind of online storage are you talking about? – Neil Smithline Nov 28 '15 at 21:55
  • 1
    If the provider cannot be trusted don't forget to consider the risks applicable to loss of access (either as a result of accidental deletion/corruption or malicious encryption that prevents you accessing your data). – R15 Nov 29 '15 at 9:26
  • By "önline storage" I believe you intend "cloud storage". If this is correct, I recommend you edit your question. – JaimeCastells Nov 29 '15 at 12:44
  • 1
    Online vs offline is usually used to differentiate between storage that is accessible vs inaccessible. A hard drive plugged into the machine would be online, in other words. A hard drive disconnected and stored in a closet would be offline. – Xander Jan 28 '16 at 15:37
  • 1
    "mounted file system on a VPS" you're not planning on decrypting the fs remotely, are you? Because encryption only protects the data "at rest." Anyone working at the remote site could take a snapshot of the VPS while your drive is decrypted, for example. dm_crypt will only help if you're willing to copy the entire filesystem image locally, decrypt, add/update files, re-encrypt, and upload the image back to the provider. – user15392 Jan 28 '16 at 18:12
1

If this is just about the bit length (and I couldn't find out anything about the Block Mode -- I'm just guessing "XTS") that you should use for AES (128, 192 or 256), then 128 bits should be enough.

Check keylength.com and put in a date far enough in the future for your needs.

| improve this answer | |

Not the answer you're looking for? Browse other questions tagged or ask your own question.