Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I'm setting up automated backups with duplicity, but there's something I don't get. I have imported my own public GPG key, but it seems that duplicity wants the private key as well. It was my understanding that the public key was used to encrypt the data, and the private key to decrypt it. Therefore, I see no reason why the private key would be needed here.

Please enlighten me :)

share|improve this question

migrated from stackoverflow.com Sep 10 '11 at 15:34

This question came from our site for professional and enthusiast programmers.

2  
I don't know duplicity, but probably it's needed to sign the backups. What options are you using? –  Matteo Italia Sep 10 '11 at 14:26
    
If you're worried about security, why not make a second key-pair and give it that private key - as long as you remember which public key to use to get the backups again, that should work? –  deanWombourne Sep 10 '11 at 14:28
    
@Matteo: You're right, it's because it's trying to sign the data. That's too bad I can't mark your comment as accepted! deanWombourne: Yes, I guess it would work too. –  Executifs Sep 10 '11 at 14:31
    
@Executifs: well, this can be quickly fixed. :) –  Matteo Italia Sep 10 '11 at 14:37
add comment

2 Answers

up vote 4 down vote accepted

I don't know duplicity, but probably it's needed to sign the backups.

share|improve this answer
    
Could you elaborate on why signing would be needed? –  Simon Sheehan Sep 10 '11 at 15:38
    
If you mean "why would you need signing", it's to make sure that nobody modified the backup after the signature. If it's "why do you need a private key for signing", it's because you use it to encrypt the hash, so that everybody can check it (decrypting it with the public key) but nobody can recreate it after tampering the data. –  Matteo Italia Sep 10 '11 at 15:55
add comment

Cloud be. But there you can create an extra signing key to keep the private key which encrypted the backup very save: The Problem is here:

http://thread.gmane.org/gmane.comp.sysutils.backup.duplicity.general/4245

share|improve this answer
    
Please elaborate on what's found within the post, instead of just pasting a link to it. –  KronoS Aug 9 '13 at 21:44
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.