[aklug] Re: Rsyncrypto?

From: Christopher Howard <choward@indicium.us>
Date: Sat Feb 06 2010 - 19:45:19 AKST

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Royce Williams wrote:
> Christopher Howard said, on 02/06/2010 05:19 PM:
>> Hey, any of you guys worked with rsyncrypto? Looks convenient, but I'm a
>> little suspicious because I don't see it in my software tree.
>
> If I understand correctly, this is the salient idea:
>
> http://rsyncrypto.lingnu.com/index.php/Home_Page#What_is_Rsyncrypto
>
> "This modification ensures that two almost identical files, such as the
> same file before an after a change, when encrypted using rsyncrypto and
> the same key, will produce almost identical encrypted files."
>
>
> Check my math here, but isn't that part of the point of good encryption
> schemes -- to make small changes look totally different? If two
> almost-the-same files produce two almost-the-same encrypted files, that
> smells like a significant attack vector to me. (Just my first knee-jerk
> reaction).
>
>
> Royce
> ---------
> To unsubscribe, send email to <aklug-request@aklug.org>
> with 'unsubscribe' in the message body.
>

Hmm... anyone have any suggestions then for an alternative method, if
you want to sync files remotely to an untrusted server? (for backup
purposes).

I was thinking about getting some backup space through evbackup.com, as
the prices seem decent and they support ssh, rsync, and so forth, but of
course I don't actually trust them to not look at the personal data I am
backing up.

- --
Christopher Howard
http://indicium.us
http://theologia.indicium.us
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAktuRV8ACgkQQ5FLNdi0BcVNngCeO4b6bH0kyOWbC1JxCx+e6i7+
dqQAnj3To96mo2Z729lqTvLTwNWzTuOR
=3S+Y
-----END PGP SIGNATURE-----
---------
To unsubscribe, send email to <aklug-request@aklug.org>
with 'unsubscribe' in the message body.
Received on Sat Feb 6 19:46:45 2010

This archive was generated by hypermail 2.1.8 : Sat Feb 06 2010 - 19:46:45 AKST