3 .\" Author: Kevin Till <kevin.till@zmanda.com>
4 .\" Generator: DocBook XSL Stylesheets vsnapshot_8273 <http://docbook.sf.net/>
6 .\" Manual: System Administration Commands
7 .\" Source: Amanda 3.2.1
10 .TH "AMCRYPT" "8" "12/14/2010" "Amanda 3\&.2\&.1" "System Administration Commands"
11 .\" -----------------------------------------------------------------
12 .\" * set default formatting
13 .\" -----------------------------------------------------------------
14 .\" disable hyphenation
16 .\" disable justification (adjust text to left margin only)
18 .\" -----------------------------------------------------------------
19 .\" * MAIN CONTENT STARTS HERE *
20 .\" -----------------------------------------------------------------
22 amcrypt \- reference crypt program for Amanda symmetric data encryption
24 .HP \w'\fBamcrypt\fR\ 'u
35 to work\&. Aespipe is available from
36 : http://loop-aes.sourceforge.net
40 will search for the aespipe program in the following directories: /usr/bin:/usr/local/bin:/sbin:/usr/sbin\&.
48 through file descriptor 3\&. The passphrase should be stored in ~amanda/\&.am_passphrase\&.
49 .SH "HOW TO CREATE ENCRYPTION KEYS FOR AMCRYPT"
51 1\&. Create 65 random encryption keys and encrypt those keys using gpg\&. Reading from /dev/random may take indefinitely long if kernel\'s random entropy pool is empty\&. If that happens, do some other work on some other console (use keyboard, mouse and disks)\&.
53 head \-c 2925 /dev/random | uuencode \-m \- | head \-n 66 | tail \-n 65 \e | gpg \-\-symmetric \-a > ~amanda/\&.gnupg/am_key\&.gpg
55 This will ask for a passphrase\&. Remember this passphrase as you will need it in the next step\&.
57 2\&. Store the passphrase inside the home\-directory of the AMANDA\-user and protect it with proper permissions:
59 echo my_secret_passphrase > ~amanda/\&.am_passphrase
60 chown amanda:disk ~amanda/\&.am_passphrase
61 chmod 700 ~amanda/\&.am_passphrase
63 .SH "KEY AND PASSPHRASE"
67 uses the same key to encrypt and decrypt data\&.
69 It is very important to store and protect the key and the passphrase properly\&. Encrypted backup data can
71 be recovered with the correct key and passphrase\&.
81 : http://wiki.zmanda.com/
84 \fBKevin Till\fR <\&kevin\&.till@zmanda\&.com\&>
86 Zmanda, Inc\&. (http://www\&.zmanda\&.com)