<?xml version="1.0" encoding="ISO-8859-1"?>
<!DOCTYPE refentry PUBLIC "-//OASIS//DTD DocBook XML V4.1.2//EN"
                   "http://www.oasis-open.org/docbook/xml/4.1.2/docbookx.dtd"
[
  <!-- entities files to use -->
  <!ENTITY % global_entities SYSTEM 'global.entities'>
  %global_entities;
]>

<refentry id='amcryptsimple.8'>
<refmeta>
<refentrytitle>amcryptsimple</refentrytitle>
<manvolnum>8</manvolnum>
&rmi.source;
&rmi.version;
&rmi.manual.8;
</refmeta>
<refnamediv>
<refname>amcryptsimple</refname>
<refpurpose>reference simple crypt program for Amanda symmetric data encryption</refpurpose>
</refnamediv>
<refentryinfo>
&author.ktill;
</refentryinfo>
<!-- body begins here -->
<refsynopsisdiv>
<cmdsynopsis>
  <command>amcryptsimple</command>  to be called by Amanda only 
</cmdsynopsis>
</refsynopsisdiv>

<refsect1><title>DESCRIPTION</title>
<para>&amcryptsimple;
calls <emphasis remap='B'>gpg</emphasis> to perform symmetric data encryption
on Amanda backup.
&amcryptsimple; will search for the gpg program in the following directories:
/usr/local/bin:/usr/bin:/usr/sbin:/bin:/sbin</para>
<para>&amcryptsimple; uses one passphrase to encrypt the Amanda data
and uses the same passphrase to decrypt the Amanda backup data. &amcryptsimple; uses
AES256 as the symmetric cipher.</para> 
</refsect1>


<refsect1><title>How to Create Passphrase</title>

<para>Store the passphrase inside the home-directory of the Amanda user ($amanda_user) and protect it with proper permissions:
<programlisting>
echo my_secret_passphrase > ~$amanda_user/.am_passphrase
chown $amanda_user:disk ~$amanda_user/.am_passphrase
chmod 700 ~$amanda_user/.am_passphrase
</programlisting></para>
</refsect1>

<refsect1><title>NOTES</title>
<para>Choose a good passphrase and protect it properly. Backup data can only be
restored with the passphrase. There is no backdoor.</para>
<para>If storing and securing passphrase in your environment presents challenges,
Amanda provide public-key data encryption through &amgpgcrypt;. Public-key
encryption uses the public key to encrypt and uses the private key to decrypt.</para>
</refsect1>

<seealso>
<manref name="amanda.conf" vol="5"/>,
<manref name="amcrypt" vol="8"/>,
<manref name="amgpgcrypt" vol="8"/>,
<manref name="amrestore" vol="8"/>,
<manref name="gpg" vol="1"/>
</seealso>

</refentry>