{"action":"created","issue":{"url":"https://api.github.com/repos/jborg/attic/issues/272","labels_url":"https://api.github.com/repos/jborg/attic/issues/272/labels{/name}","comments_url":"https://api.github.com/repos/jborg/attic/issues/272/comments","events_url":"https://api.github.com/repos/jborg/attic/issues/272/events","html_url":"https://github.com/jborg/attic/issues/272","id":66437447,"number":272,"title":"improve and simplify key modes","user":{"login":"ThomasWaldmann","id":356103,"avatar_url":"https://avatars.githubusercontent.com/u/356103?v=3","gravatar_id":"","url":"https://api.github.com/users/ThomasWaldmann","html_url":"https://github.com/ThomasWaldmann","followers_url":"https://api.github.com/users/ThomasWaldmann/followers","following_url":"https://api.github.com/users/ThomasWaldmann/following{/other_user}","gists_url":"https://api.github.com/users/ThomasWaldmann/gists{/gist_id}","starred_url":"https://api.github.com/users/ThomasWaldmann/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ThomasWaldmann/subscriptions","organizations_url":"https://api.github.com/users/ThomasWaldmann/orgs","repos_url":"https://api.github.com/users/ThomasWaldmann/repos","events_url":"https://api.github.com/users/ThomasWaldmann/events{/privacy}","received_events_url":"https://api.github.com/users/ThomasWaldmann/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-04-05T13:11:24Z","updated_at":"2015-04-05T13:46:38Z","closed_at":null,"body":"passphrase mode: currently, you can't change the passphrase in \"passphrase\" mode as the aes/enc_mac/id_hash key is directly derived from the passphrase. this might come unexpected to the user and is not solvable without starting from scratch.\r\n\r\nkeyfile mode: currently, the keyfile is stored locally on the machine which is backed up. so in case somebody does not backup the keyfile separately (not just within the encrypted attic backup), he can't recover as he has lost access to the key if the machine has a fatal mass storage defect.\r\n\r\nboth problems can be solved like this:\r\n\r\na) kill the passphrase mode as it is implemented currently\r\nb) create a new passphrase mode that works like the keyfile mode, but stores the keyfile data into the backup repository.\r\n\r\nFrom the user's perspective: this means that he is still dealing just with a passphrase. But the passphrase can be changed because the key is not directly derived from it any more.\r\n\r\nFrom an attacker's perspective (who controls your backup storage): this is also equivalent to the old passphrase mode, because knowledge of the passphrase is all the attacker needs to decrypt your backups because the key is stored in the repo in this mode. If one wants to avoid that, one needs to use keyfile mode, which is still available as alternative option as it was before - then attacker would need access to the keyfile on your local machine AND your passphrase.\r\n\r\nFrom the code's perspective: both passphrase mode and keyfile mode are now very similar, just the location of the keyfile (contents) is different (local vs. backup repo).\r\n"},"comment":{"url":"https://api.github.com/repos/jborg/attic/issues/comments/89772733","html_url":"https://github.com/jborg/attic/issues/272#issuecomment-89772733","issue_url":"https://api.github.com/repos/jborg/attic/issues/272","id":89772733,"user":{"login":"f4m8","id":985395,"avatar_url":"https://avatars.githubusercontent.com/u/985395?v=3","gravatar_id":"","url":"https://api.github.com/users/f4m8","html_url":"https://github.com/f4m8","followers_url":"https://api.github.com/users/f4m8/followers","following_url":"https://api.github.com/users/f4m8/following{/other_user}","gists_url":"https://api.github.com/users/f4m8/gists{/gist_id}","starred_url":"https://api.github.com/users/f4m8/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/f4m8/subscriptions","organizations_url":"https://api.github.com/users/f4m8/orgs","repos_url":"https://api.github.com/users/f4m8/repos","events_url":"https://api.github.com/users/f4m8/events{/privacy}","received_events_url":"https://api.github.com/users/f4m8/received_events","type":"User","site_admin":false},"created_at":"2015-04-05T13:46:38Z","updated_at":"2015-04-05T13:46:38Z","body":"Hello Thomas,\r\n\r\nif this idea is my first contribution to attic, this will make me proud. As we talk about attic and extending the backends, i hope to do more  contributions. My plan is to make a ceph/rados backend.\r\n\r\n"}}