Encryption strength
Xopero ONE Backup & Recovery uses Advanced Encryption Standard (AES) algorithm to encrypt data. AES is also known by its original name Rijndael. It is a symmetric-key algorithm, meaning the same key is used for both encrypting and decrypting the data. AES is considered to be unbreakable and is widely used by many governments and organizations. It’s the first and only publicly available cipher approved by the U.S. National Security Agency (NSA) and it is used by the U.S. government to process top-secret information.
Within Xopero ONE Backup and Recovery and advanced backup plan settings, the user can additionally choose the encryption strength:
- Low - Forces the AES algorithm to work in OFB (OUTPUT FEEDBACK) mode with an encryption key of 128 bits.
- Medium - as in the case of 'Low' encryption strength, the AES algorithm is run in OFB mode, but the key used is the encryption twice longer - it consists of 256 bits.
- High - with this option selected, AES will work in CBC (CIPHER-BLOCK CHAINING) mode, and the encryption key is 256 bits long.
During the encryption configuration, the user must provide a string of characters on the basis of which the encryption key will be built. This string is saved in Secure Password Manager.
It is worth adding that depending on the selected encryption method, the backup time will vary and the load on the end device, or selected functionalities may be limited (e.g. iSCSI launch during CBC encryption).
