How To:Set up data encryption: Difference between revisions
m (describe attention needed) |
|||
Line 82: | Line 82: | ||
head -c 2925 /dev/random | uuencode -m - | head -n 66 | tail -n 65 | \ | head -c 2925 /dev/random | uuencode -m - | head -n 66 | tail -n 65 | \ | ||
gpg --symmetric -a > ~amanda/.gnupg/am_key.gpg | gpg --symmetric -a > ~amanda/.gnupg/am_key.gpg | ||
Note that the options here are very linux-specific. The idea is to read from /dev/random, uuencode it, and get 65 lines of gibberish. On FreeBSD you have to use something like <tt>head -c 4000 /dev/random ...</tt> because <tt>head -c xxxx /dev/random | uuencode -m -</tt> needs to generate 65 full lines of encoded text. | |||
*This will ask for a passphrase. Remember this passphrase as you will need it in the next step. | *This will ask for a passphrase. Remember this passphrase as you will need it in the next step. |
Revision as of 14:16, 25 January 2008
What is needed to recover encrypted tapes
To properly retrieve any encrypted data, the following are needed:
- the key (the private key in the public-key encryption case)
- the passphrase
- the "crypt" program used. Amanda dump file header indicates what crypt program was used. For example:
AMANDA: FILE 20051215 boston.zmanda.com /usr/tmp/gpa2 lev 0 comp .gz program /bin/gtar crypt enc client_encrypt /usr/local/sbin/amcrypt client_decrypt_option -d To restore, position tape at start of file and run: dd if=<tape> bs=32k skip=1 | /usr/local/sbin/amcrypt -d | /usr/bin/gzip -dc | /bin/gtar -f...
- If the key or passphrase is lost or misplaced, the data cannot be recovered.
- There is no back-door to the encryption algorithm.
- Proper key management strategy should be in your plan before using data encryption for backup.
Server-side and client side encryption
- a new dumptype option, encrypt is added.
- specify either client or server side in the dumptype (not both):
- encrypt client or encrypt server
- specify client side encryption program:
- client_encrypt "your encryption program"
- a sample encryption/decryption program amcrypt is provided. amcrypt is a wrapper of aespipe.
- aespipe supports AES128, AES192 and AES256 and it uses SHA-256, SHA-384 and SHA-512 respectively.
- any encryption/decryption program can be used as long as it reads from stdin and writes to stdout.
- client_decrypt_option "decrypt parameter" #default to -d
- client_encrypt "your encryption program"
- specify server side encryption program:
- server_encrypt "your encryption program"
- can use amcrypt as in the case of client encryption.
- server_decrypt_option "decrypt parameter" #default to -d
- server_encrypt "your encryption program"
- The logic assumes compression then encryption during backup(thus decrypt then uncompress during restore). Specifying client-encryption and server-compression is not supported
- dumptype sample:
define dumptype server-encrypt-fast { global program "GNUTAR" comment "dump with fast client compression and server symmetric encryption" compress client fast encrypt server server_encrypt "/usr/local/sbin/amcrypt" server_decrypt_option "-d" }
define dumptype client-encrypt-nocomp { global program "GNUTAR" comment "dump with no ompression and client symmetric encryption" compress none encrypt client client_encrypt "/usr/local/sbin/amcrypt" client_decrypt_option "-d" }
- To restore client encrypted tape. Do either:
1. take the physical tape to the client machine and do the restore on the client machine where it has the key( am_key.gpg) and passphrase(.am_passphrase).
or
2. take the key and passphrase to the server machine where the tape is located.
Additional packages needed
- aespipe http://loop-aes.sourceforge.net/aespipe/aespipe-v2.3b.tar.bz2 and the bz2aespipe-wrapper that comes with it. It gets patched as described later.
- the wrapper-script amcrypt, as listed below,
- GNU-PG http://www.gnupg.org/(en)/download/index.html. This should be part of most current operating systems already.
- uuencode ( sharutils*.rpm in linux distro).
Setup
- Configure and compile aespipe:
tar -xjf aespipe-v2.3b.tar.bz2 cd aespipe-v2.3b ./configure make make install
- Generate and store the gpg-key for the Amanda user:
# taken from the aespipe-README head -c 2925 /dev/random | uuencode -m - | head -n 66 | tail -n 65 | \ gpg --symmetric -a > ~amanda/.gnupg/am_key.gpg
Note that the options here are very linux-specific. The idea is to read from /dev/random, uuencode it, and get 65 lines of gibberish. On FreeBSD you have to use something like head -c 4000 /dev/random ... because head -c xxxx /dev/random | uuencode -m - needs to generate 65 full lines of encoded text.
- This will ask for a passphrase. Remember this passphrase as you will need it in the next step.
Store the passphrase inside the home-directory of the Amanda user and protect it with proper permissions:
echo my_secret_passphrase > ~amanda/.am_passphrase chown amanda:disk ~amanda/.am_passphrase chmod 700 ~amanda/.am_passphrase
- We need this file because we don't want to have to enter the passphrase manually everytime we run amdump. We have to patch bz2aespipe to read the passphrase from a file. I have called that file ~amanda/.am_passphrase.
- Store the key and the passphrase in some other place as well, without these information you can't access any tapes that have been encrypted with it (this is exactly why we are doing all this, isn't it? ;) ).
- create amcrypt(or it will available in sourceforge and the rpms) as below:
#!/bin/sh # # Original wrapper by Paul Bijnens # # adapted by Stefan G. Weichinger # to enable gpg-encrypted dumps via aespipe # also adapted by Matthieu Lochegnies for server-side encryption prefix=/usr/local exec_prefix=${prefix} sbindir=${exec_prefix}/sbin AMANDA_HOME=~amanda AM_AESPIPE=${exec_prefix}/sbin/amaespipe AM_PASSPHRASE=$AMANDA_HOME/.am_passphrase $AM_AESPIPE "$@" 3< $AM_PASSPHRASE rc=$? exit $rc
- create amaespipe(or it will available in sourceforge and the rpms) which is based on wrapper-script bz2aespipe, which comes with the aespipe-tarball:
#! /bin/sh # FILE FORMAT # 10 bytes: constant string 'bz2aespipe' # 10 bytes: itercountk digits # 1 byte: '0' = AES128, '1' = AES192, '2' = AES256 # 1 byte: '0' = SHA256, '1' = SHA384, '2' = SHA512, '3' = RMD160 # 24 bytes: random seed string # remaining bytes are bzip2 compressed and aespipe encrypted # These definitions are only used when encrypting. # Decryption will autodetect these definitions from archive. ENCRYPTION=AES256 HASHFUNC=SHA256 ITERCOUNTK=100 AMANDA_HOME=~amanda WAITSECONDS=1 GPGKEY=""$AMANDA_HOME/.gnupg/am_key.gpg" FDNUMBER=3 PATH=/usr/bin:/usr/local/bin export PATH if test x$1 = x-d ; then # decrypt n=`head -c 10 - | tr -d -c 0-9a-zA-Z` if test x${n} != xbz2aespipe ; then echo "bz2aespipe: wrong magic - aborted" >/dev/tty exit 1 fi itercountk=`head -c 10 - | tr -d -c 0-9` if test x${itercountk} = x ; then itercountk=0; fi n=`head -c 1 - | tr -d -c 0-9` encryption=AES128 if test x${n} = x1 ; then encryption=AES192; fi if test x${n} = x2 ; then encryption=AES256; fi n=`head -c 1 - | tr -d -c 0-9` hashfunc=SHA256 if test x${n} = x1 ; then hashfunc=SHA384; fi if test x${n} = x2 ; then hashfunc=SHA512; fi if test x${n} = x3 ; then hashfunc=RMD160; fi seedstr=`head -c 24 - | tr -d -c 0-9a-zA-Z+/` aespipe -K ${GPGKEY} -p ${FDNUMBER} -e ${encryption} -H ${hashfunc} -S ${seedstr} -C ${itercountk} -d else # encrypt echo -n bz2aespipe echo ${ITERCOUNTK} | awk '{printf "%10u", $1;}' n=`echo ${ENCRYPTION} | tr -d -c 0-9` aesstr=0 if test x${n} = x192 ; then aesstr=1; fi if test x${n} = x256 ; then aesstr=2; fi n=`echo ${HASHFUNC} | tr -d -c 0-9` hashstr=0 if test x${n} = x384 ; then hashstr=1; fi if test x${n} = x512 ; then hashstr=2; fi if test x${n} = x160 ; then hashstr=3; fi seedstr=`head -c 18 /dev/urandom | uuencode -m - | head -n 2 | tail -n 1` echo -n ${aesstr}${hashstr}${seedstr} aespipe -K ${GPGKEY} -p ${FDNUMBER} -e ${ENCRYPTION} -H ${HASHFUNC} -S ${seedstr} -C ${ITERCOUNTK} -w ${WAITSECONDS} fi exit 0
Changes from bz2aespipe:
- Decreased WAITSECONDS: No need to wait for 10 seconds to read the passphrase.
- Removed bzip2 from the pipes: AMANDA triggers GNU-zip-compression by itself, no need to do this twice (slows down things, blows up size).
- Added options -K and -p: This enables aespipe to use the generated gpg-key and tells it the number of the file-descriptor to read the passphrase from.
You may set various parameters inside bz2aespipe. You may also call bz2aespipe with various command-line-parameter to choose the encryption-algorithm, hash-function etc. . For a start I have chosen to call bz2aespipe without command-line-options.