0

Up to this point I was using physical hard drives for backups, typically using dm_crypt as mentioned here. If online storage is used instead, and the provider cannot be trusted how much should the security parameter of the encryption routine be increased (I'm always using an encrypted drive) so that recovering the contents becomes unfeasible.

This question approaches the same issues but considers the files to be encrypted by the backup provider and not the user.

closed as too broad by Eric G, Ohnana, Neil Smithline, Iszi, Xander Jan 28 '16 at 21:19

Please edit the question to limit it to a specific problem with enough detail to identify an adequate answer. Avoid asking multiple distinct questions at once. See the How to Ask page for help clarifying this question. If this question can be reworded to fit the rules in the help center, please edit the question.

  • 2
    What kind of online storage are you talking about? – Neil Smithline Nov 28 '15 at 21:55
  • 1
    If the provider cannot be trusted don't forget to consider the risks applicable to loss of access (either as a result of accidental deletion/corruption or malicious encryption that prevents you accessing your data). – R15 Nov 29 '15 at 9:26
  • By "önline storage" I believe you intend "cloud storage". If this is correct, I recommend you edit your question. – JaimeCastells Nov 29 '15 at 12:44
  • 1
    Online vs offline is usually used to differentiate between storage that is accessible vs inaccessible. A hard drive plugged into the machine would be online, in other words. A hard drive disconnected and stored in a closet would be offline. – Xander Jan 28 '16 at 15:37
  • 1
    "mounted file system on a VPS" you're not planning on decrypting the fs remotely, are you? Because encryption only protects the data "at rest." Anyone working at the remote site could take a snapshot of the VPS while your drive is decrypted, for example. dm_crypt will only help if you're willing to copy the entire filesystem image locally, decrypt, add/update files, re-encrypt, and upload the image back to the provider. – drewbenn Jan 28 '16 at 18:12
1

If this is just about the bit length (and I couldn't find out anything about the Block Mode -- I'm just guessing "XTS") that you should use for AES (128, 192 or 256), then 128 bits should be enough.

Check keylength.com and put in a date far enough in the future for your needs.

Not the answer you're looking for? Browse other questions tagged or ask your own question.