'\" t
.\"     Title: amcryptsimple
.\"    Author: Kevin Till <kevin.till@zmanda.com>
.\" Generator: DocBook XSL Stylesheets vsnapshot_8273 <http://docbook.sf.net/>
.\"      Date: 11/05/2009
.\"    Manual: System Administration Commands
.\"    Source: Amanda 2.6.1p2
.\"  Language: English
.\"
.TH "AMCRYPTSIMPLE" "8" "11/05/2009" "Amanda 2\&.6\&.1p2" "System Administration Commands"
.\" -----------------------------------------------------------------
.\" * set default formatting
.\" -----------------------------------------------------------------
.\" disable hyphenation
.nh
.\" disable justification (adjust text to left margin only)
.ad l
.\" -----------------------------------------------------------------
.\" * MAIN CONTENT STARTS HERE *
.\" -----------------------------------------------------------------
.SH "NAME"
amcryptsimple \- reference simple crypt program for \fIAmanda\fR symmetric data encryption
.SH "SYNOPSIS"
.HP \w'\fBamcryptsimple\fR\ 'u
\fBamcryptsimple\fR  to be called by \fIAmanda\fR only 
.SH "DESCRIPTION"
.PP

\fBamcryptsimple\fR
calls
\fBgpg\fR
to perform symmetric data encryption on
\fIAmanda\fR
backup\&.
\fBamcryptsimple\fR
will search for the gpg program in the following directories: /usr/local/bin:/usr/bin:/usr/sbin:/bin:/sbin
.PP

\fBamcryptsimple\fR
uses one passphrase to encrypt the
\fIAmanda\fR
data and uses the same passphrase to decrypt the
\fIAmanda\fR
backup data\&.
\fBamcryptsimple\fR
uses AES256 as the symmetric cipher\&.
.SH "HOW TO CREATE PASSPHRASE"


Store  the  passphrase  inside the home\-directory of the AMANDA\-user($amanda_user) and protect it with proper permissions:

   echo my_secret_passphrase > ~$amanda_user/\&.am_passphrase
   chown $amanda_user:disk ~$amanda_user/\&.am_passphrase
   chmod 700 ~$amanda_user/\&.am_passphrase
.SH "NOTES"
.PP
Choose a good passphrase and protect it properly\&. Backup data can only be restored with the passphrase\&. There is no backdoor\&.
.PP
If storing and securing passphrase in your environment presents challenges,
\fIAmanda\fR
provide public\-key data encryption through
\fBamgpgcrypt\fR\&. Public\-key encryption uses the public key to encrypt and uses the private key to decrypt\&.
.SH "SEE ALSO"
.PP
\fBamanda\fR(8),
\fBamanda.conf\fR(5),
\fBamcrypt\fR(8),
\fBamgpgcrypt\fR(8),
\fBamrestore\fR(8),
\fBgpg\fR(1),
: http://wiki.zmanda.com
.SH "AUTHOR"
.PP
\fBKevin Till\fR <\&kevin\&.till@zmanda\&.com\&>
.RS 4
Zmanda, Inc\&. (http://www\&.zmanda\&.com)
.RE