Encryption & TLS

NGBackup protects data in transit and at rest.

Data at rest

• AES-CBC encryption of backup data (AES-128 by default; 192- and 256-bit keys are accepted on decrypt for stock-Bacula interop), performed by the File Daemon so data leaves the client already encrypted. Each file’s payload carries a verifiable signature (RSA/PKCS#7) so a restore proves the data was not tampered with.
• PKI key management — each client has a master/data key pair; only holders of the private key can restore.
• Works together with deduplication and compression.

Data in transit

• TLS between every component (Director, Storage Daemon, File Daemon, Console).
• TLS-PSK (RFC 4279) keys the daemon-to-daemon sessions; TLS Authenticate provides mutual authentication.
• The deduplication V2 wire protocol adds its own HKDF-SHA256 + ChaCha20-Poly1305 AEAD channel.

All TLS and PKI directives are in the Director, Client and Storage references.

Caution

Keep your PKI private keys safe and backed up separately — without them, encrypted backups cannot be restored. That is the point of strong encryption, and also its responsibility.