1AMCRYPT-OSSL(8)                                                AMCRYPT-OSSL(8)
2
3
4

NAME

6       amcrypt-ossl - crypt program for Amanda symmetric data encryption using
7       OpenSSL
8

SYNOPSIS

10       amcrypt-ossl [-d]
11

DESCRIPTION

13       amcrypt-ossl uses OpenSSL to encrypt and decrypt data. OpenSSL is
14       available from www.openssl.org[1]. OpenSSL offers a wide variety of
15       cipher choices ( amcrypt-ossl defaults to 256-bit AES) and can use
16       hardware cryptographic accelerators on several platforms.
17
18       amcrypt-ossl will search for the OpenSSL program in the following
19       directories:
20       /bin:/usr/bin:/usr/local/bin:/usr/ssl/bin:/usr/local/ssl/bin.
21

PASSPHRASE MANAGEMENT

23       amcrypt-ossl uses the same pass phrase to encrypt and decrypt data. It
24       is very important to store and protect the pass phrase properly.
25       Encrypted backup data can only be recovered with the correct
26       passphrase.
27
28       OpenSSL's key derivation routines use a salt to guard against
29       dictionary attacks on the pass phrase; still it is important to pick a
30       pass phrase that is hard to guess. The Diceware method (see
31       www.diceware.com[2]) can be used to create passphrases that are
32       difficult to guess and easy to remember.
33

FILES

35       /var/lib/amanda/.am_passphrase
36           File containing the pass phrase. It should not be readable by any
37           user other than the Amanda user.
38

SEE ALSO

40       amanda(8), amanda.conf(5), openssl(1), amcrypt-ossl-asym(8)
41

REFERENCES

43        1. www.openssl.org
44           http://www.openssl.org/
45
46        2. www.diceware.com
47           http://www.diceware.com/
48
49
50
51                                  02/07/2007                   AMCRYPT-OSSL(8)