Hi Radosław,

> It is not about a file size. All file metadata are unencrypted and 
> simply
> available on the Bacula volume, so you can get it directly from volume 
> or
> catalog.

Yes, that's for sure, and being this the scenario, I feel that the 
sparse file issue has a much lower relevance, at least from a security 
point of view.

> It is about "Known plaintext attack".
> I could be wrong about it and Bacula encryption could not be 
> susceptible to
> this kind of attacks.

I'm not a crypto professional at all, but my gut feeling is that 
expanding sparse files to their "theoretical" size before encrypting 
only makes this much worse, since you end up encrypting long sequences 
of zeros and providing the attacker with the easiest possible scenario 
to mount a known plaintext attack.

Regards,
Alberto


>
> best regards
> --
> Radosław Korzeniewski
> radoslaw AT korzeniewski DOT net

------------------------------------------------------------------------------
Minimize network downtime and maximize team effectiveness.
Reduce network management and security costs.Learn how to hire 
the most talented Cisco Certified professionals. Visit the 
Employer Resources Portal
http://www.cisco.com/web/learning/employer_resources/index.html
_______________________________________________
Bacula-users mailing list
Bacula-users AT lists.sourceforge DOT net
https://lists.sourceforge.net/lists/listinfo/bacula-users