[SOLVED] Backup Encryption CLI or GUI?

[Noiden]

Hi,

I have configured a Proxmox Backup Server and added the storage inside the PVE GUI (Datacenter > Storage > Add > Proxmox Backup Server).

I also enabled encryption from within the PVE GUI and used the GUI to create a new key.
What kind of encryption will this create? The key was only 44 characters, is that safe enough?

I have only used Veeam before, and there I could add a very long "password/key" to encrypt the backups.

I also read some other encryption instruction here,
https://pbs.proxmox.com/docs/backup-client.html#encryption

Is it for some other backup encryption?

Thanks.

 

[aaron]

The docs you linked to are for the PBS client to send local backups from within a machine.

The PVE side of how to configure and where the encryption key is stored is located here: https://pve.proxmox.com/pve-docs/chapter-pvesm.html#storage_pbs_encryption

The key length is not the only measure of how secure the encryption is. It also depends highly on the algorithm used. In the PBS documentation that you linked you, you see that PBS is using AES-256 in GCM mode. That means, the key length is 256 bits. These bits can be stored in base64 which results in 44 characters used.

 

[Noiden]

The docs you linked to are for the PBS client to send local backups from within a machine.

The PVE side of how to configure and where the encryption key is stored is located here: https://pve.proxmox.com/pve-docs/chapter-pvesm.html#storage_pbs_encryption

The key length is not the only measure of how secure the encryption is. It also depends highly on the algorithm used. In the PBS documentation that you linked you, you see that PBS is using AES-256 in GCM mode. That means, the key length is 256 bits. These bits can be stored in base64 which results in 44 characters used.

Aha, I see. Ok, then I have activated the encryption on the correct place, I did it through the GUI though. Thank you very much for the information.