2 .\" Title: amcrypt-ossl
3 .\" Author: Kevin Till <kevin.till@zmanda.com>
4 .\" Generator: DocBook XSL Stylesheets vsnapshot_8273 <http://docbook.sf.net/>
6 .\" Manual: System Administration Commands
7 .\" Source: Amanda 2.6.1p2
10 .TH "AMCRYPT\-OSSL" "8" "11/05/2009" "Amanda 2\&.6\&.1p2" "System Administration Commands"
11 .\" -----------------------------------------------------------------
12 .\" * set default formatting
13 .\" -----------------------------------------------------------------
14 .\" disable hyphenation
16 .\" disable justification (adjust text to left margin only)
18 .\" -----------------------------------------------------------------
19 .\" * MAIN CONTENT STARTS HERE *
20 .\" -----------------------------------------------------------------
22 amcrypt-ossl \- crypt program for \fIAmanda\fR symmetric data encryption using OpenSSL
24 .HP \w'\fBamcrypt\-ossl\fR\ 'u
25 \fBamcrypt\-ossl\fR [\-d]
32 to encrypt and decrypt data\&. OpenSSL is available from
33 www\&.openssl\&.org\&. OpenSSL offers a wide variety of cipher choices (
35 defaults to 256\-bit AES) and can use hardware cryptographic accelerators on several platforms\&.
39 will search for the OpenSSL program in the following directories: /bin:/usr/bin:/usr/local/bin:/usr/ssl/bin:/usr/local/ssl/bin\&.
40 .SH "PASSPHRASE MANAGEMENT"
44 uses the same pass phrase to encrypt and decrypt data\&. It is very important to store and protect the pass phrase properly\&. Encrypted backup data can
46 be recovered with the correct passphrase\&.
48 OpenSSL\'s key derivation routines use a salt to guard against dictionary attacks on the pass phrase; still it is important to pick a pass phrase that is hard to guess\&. The Diceware method (see
49 www\&.diceware\&.com) can be used to create passphrases that are difficult to guess and easy to remember\&.
52 /var/lib/amanda/\&.am_passphrase
54 File containing the pass phrase\&. It should not be readable by any user other than the
64 \fBamcrypt-ossl-asym\fR(8),
65 : http://wiki.zmanda.com
68 \fBKevin Till\fR <\&kevin\&.till@zmanda\&.com\&>
70 Zmanda, Inc\&. (http://www\&.zmanda\&.com)
76 \%http://www.openssl.org/
81 \%http://www.diceware.com/