I was wondering, if it was possible to use LUKS encryption with tape drives, QIC for instance.
I'm using LUKS for USB drives and internal disks, even DVDs and CDROMs. But I was thinking of maybe using it to encrypt tape drives as well.
Should I just use cryptsetup luksFormat
directly to the tape drive and then enable the device with cryptsetup luksOpen
?
Best Answer
You are unlikely to be happy with the huge latencies introduced by LUKS on linear media. A better idea is to pipe the output of tar through OpenSSL, encrypting it with a streaming cipher, before sending it to the tape device.