Encrpytion light on tape drive lit?

[ahorner]

I just noticed when running a backup, the hardware Encryption light was lit on my drive for one of my tapes. This tape has been used without hardware encryption in the past.

Has PBS made a change to the way encryption is implemented, now using the hardware encryption by default?

Has PBS just corrupted my tape?

Thanks

 

[dietmar]

Has PBS made a change to the way encryption is implemented, now using the hardware encryption by default?

There was a bug fix (Older version did not always enable encryption correctly).

 

[ahorner]

Hi dietmar,

If I understand correctly, hardware encryption is optional and not recommended, and instead software encryption before the encryption hit the tape is used in order to allow key recovery?

In the case of the bug you mentioned, does that mean tapes may contain unencrypted data which was otherwise expected to be encrypted? This is of course very bad and blanking and rewriting the tapes would be necesary if true.

 

[dietmar]

If I understand correctly, hardware encryption is optional and not recommended, and instead software encryption before the encryption hit the tape is used in order to allow key recovery?

There are different types/layers of encryption, You can use client side encryption, or tape encryption...

 

[ahorner]

Does the tape encryption, which appears to be what is happening here with the hardware encryption enabled, still allow for key recovery? I was under the assumption it does not, so I cose software encryption hence my confusion at the light being lit

 

[ahorner]

Just gonna bump that last question as I would say it is quite a major and reasonable concern - Selecting encryption should encrypt data. If it isn't encrypted, that's a problem!

 

[ahorner]

Does anyone care to comment on this? It really seems to me like something went wrong with LTO and a bug was silently fixed as noted by yourself @dietmar

There was a bug fix (Older version did not always enable encryption correctly).

but I cannot see any further expansion on this. Is there a bug report which goes into detail anywhere? I can't find one about this on the Proxmox Bugzilla. I just want to find out what was changed and whether I need to do anything about it, because as far as I can tell, PBS is doing something I never asked it to do with my tapes.