3 .\" Author: Kevin Till <kevin.till@zmanda.com>
4 .\" Generator: DocBook XSL Stylesheets v1.76.1 <http://docbook.sf.net/>
6 .\" Manual: System Administration Commands
7 .\" Source: Amanda 3.3.1
10 .TH "AMCRYPT" "8" "02/21/2012" "Amanda 3\&.3\&.1" "System Administration Commands"
11 .\" -----------------------------------------------------------------
12 .\" * Define some portability stuff
13 .\" -----------------------------------------------------------------
14 .\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
15 .\" http://bugs.debian.org/507673
16 .\" http://lists.gnu.org/archive/html/groff/2009-02/msg00013.html
17 .\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
20 .\" -----------------------------------------------------------------
21 .\" * set default formatting
22 .\" -----------------------------------------------------------------
23 .\" disable hyphenation
25 .\" disable justification (adjust text to left margin only)
27 .\" -----------------------------------------------------------------
28 .\" * MAIN CONTENT STARTS HERE *
29 .\" -----------------------------------------------------------------
31 amcrypt \- reference crypt program for Amanda symmetric data encryption
33 .HP \w'\fBamcrypt\fR\ 'u
44 to work\&. Aespipe is available from
45 : http://loop-aes.sourceforge.net
49 will search for the aespipe program in the following directories: /usr/bin:/usr/local/bin:/sbin:/usr/sbin\&.
57 through file descriptor 3\&. The passphrase should be stored in ~amanda/\&.am_passphrase\&.
58 .SH "HOW TO CREATE ENCRYPTION KEYS FOR AMCRYPT"
60 1\&. Create 65 random encryption keys and encrypt those keys using gpg\&. Reading from /dev/random may take indefinitely long if kernel\*(Aqs random entropy pool is empty\&. If that happens, do some other work on some other console (use keyboard, mouse and disks)\&.
62 head \-c 2925 /dev/random | uuencode \-m \- | head \-n 66 | tail \-n 65 \e | gpg \-\-symmetric \-a > ~amanda/\&.gnupg/am_key\&.gpg
64 This will ask for a passphrase\&. Remember this passphrase as you will need it in the next step\&.
66 2\&. Store the passphrase inside the home\-directory of the AMANDA\-user and protect it with proper permissions:
68 echo my_secret_passphrase > ~amanda/\&.am_passphrase
69 chown amanda:disk ~amanda/\&.am_passphrase
70 chmod 700 ~amanda/\&.am_passphrase
72 .SH "KEY AND PASSPHRASE"
76 uses the same key to encrypt and decrypt data\&.
78 It is very important to store and protect the key and the passphrase properly\&. Encrypted backup data can
80 be recovered with the correct key and passphrase\&.
90 : http://wiki.zmanda.com/
93 \fBKevin Till\fR <\&kevin\&.till@zmanda\&.com\&>
95 Zmanda, Inc\&. (http://www\&.zmanda\&.com)