Re: [qubes-devel] How secure is Qubes dom0 backup tool encryption?

2017-05-07 Thread Andrew David Wong
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 2017-05-07 17:43, Peter Todd wrote: > On Sun, May 07, 2017 at 12:49:06PM -0500, Andrew David Wong wrote: >> They're not mutually exclusive. You can do both. >> >> I'm the one who reported the key derivation issue [1], but even I >> think

Re: [qubes-devel] How secure is Qubes dom0 backup tool encryption?

2017-05-07 Thread Chris Laprise
On 05/07/2017 06:43 PM, Peter Todd wrote: On Sun, May 07, 2017 at 12:49:06PM -0500, Andrew David Wong wrote: They're not mutually exclusive. You can do both. I'm the one who reported the key derivation issue [1], but even I think qvm-backup is plenty safe as long as you use a high-entropy

Re: [qubes-devel] How secure is Qubes dom0 backup tool encryption?

2017-05-07 Thread Peter Todd
On Sun, May 07, 2017 at 12:49:06PM -0500, Andrew David Wong wrote: > They're not mutually exclusive. You can do both. > > I'm the one who reported the key derivation issue [1], but even I > think qvm-backup is plenty safe as long as you use a high-entropy > passphrase. (This will no longer be an