"http://www.oasis-open.org/docbook/xml/4.1.2/docbookx.dtd"

[

  %global_entities;

]>

<refentry id='amcryptsimple.8'>

<refmeta>

<refentrytitle>amcryptsimple</refentrytitle>

<manvolnum>8</manvolnum>

&rmi.source;

&rmi.version;

&rmi.manual.8;

</refmeta>

<refnamediv>

<refname>amcryptsimple</refname>

<refpurpose>reference simple crypt program for Amanda symmetric data encryption</refpurpose>

</refnamediv>

<refentryinfo>

&author.ktill;

</refentryinfo>

<refsynopsisdiv>

<cmdsynopsis>

  <command>amcryptsimple</command>  to be called by Amanda only 

</cmdsynopsis>

</refsynopsisdiv>

<refsect1><title>DESCRIPTION</title>

<para>&amcryptsimple;

calls <emphasis remap='B'>gpg</emphasis> to perform symmetric data encryption

on Amanda backup.

&amcryptsimple; will search for the gpg program in the following directories:

/usr/local/bin:/usr/bin:/usr/sbin:/bin:/sbin</para>

<para>&amcryptsimple; uses one passphrase to encrypt the Amanda data

and uses the same passphrase to decrypt the Amanda backup data. &amcryptsimple; uses

AES256 as the symmetric cipher.</para> 

</refsect1>

<refsect1><title>How to Create Passphrase</title>

<para>Store the passphrase inside the home-directory of the Amanda user ($amanda_user) and protect it with proper permissions:

<programlisting>

echo my_secret_passphrase > ~$amanda_user/.am_passphrase

chown $amanda_user:disk ~$amanda_user/.am_passphrase

chmod 700 ~$amanda_user/.am_passphrase

</programlisting></para>

</refsect1>

<refsect1><title>NOTES</title>

<para>Choose a good passphrase and protect it properly. Backup data can only be

restored with the passphrase. There is no backdoor.</para>

<para>If storing and securing passphrase in your environment presents challenges,

Amanda provide public-key data encryption through &amgpgcrypt;. Public-key

encryption uses the public key to encrypt and uses the private key to decrypt.</para>

</refsect1>

<seealso>

<manref name="amanda.conf" vol="5"/>,

<manref name="amcrypt" vol="8"/>,

<manref name="amgpgcrypt" vol="8"/>,

<manref name="amrestore" vol="8"/>,

<manref name="gpg" vol="1"/>

</seealso>

</refentry>