Re: [Bacula-users] Fwd: File Encryption Performance, Security

Hello,

>a huge amount of cycles are expended RSA signing the per-file digest. 
>Decreasing my key size from 2048 bits to 1024 bits thus increased performance, 
>significantly.

I did not delve so deep into the logic of bacula, but did you think of
encrypting the digest with the session key that encrypts the rest of
the data? Then it would not be necessary to RSA-Sign it. Would there
be any problem with such a solution that should probably be faster.

I think that when using public key encryption, there will be a session
key generated. And this session key - in my opinion - should be used
for every later encryption task. So there could be an option whether
one wants to RSA sign the digest or encrypt the digest. Is there a
possibility to make the described configurable in bacula?

If I am wrong somewhere or this is not possible due to some reasons,
please correct me.

Best Regards,
Mathias

------------------------------------------------------------------------------
Come build with us! The BlackBerry&reg; Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay 
ahead of the curve. Join us from November 9&#45;12, 2009. Register now&#33;
http://p.sf.net/sfu/devconf
_______________________________________________
Bacula-users mailing list
Bacula-users AT lists.sourceforge DOT net
https://lists.sourceforge.net/lists/listinfo/bacula-users