projectbismark/bismark-passive — Issue #3: Backup encrypted ANONYMIZATION_SEED_FILE on server to survive reflashes
Author: woodrow
Created: 2012-02-28 16:56:02+00:00
State: open

Continuity of bismark-passive data will be lost if a bismark-passive user upgrades or reflashes their router. It is necessary to save and restore the ANONYMIZATION_SEED_FILE to ensure data continuity. This process is not currently automated -- it would be incumbent on participants to perform the save and restore themselves.

These files could be backed up to a Georgia Tech server if they were encrypted by a key generated from a user-provided password using something like bcrypt or scrypt (http://www.tarsnap.com/scrypt.html). Thus, as long as we enforced some minimum password quality requirement, it would be possible for us to store these files (and other conf files) while being unable to access their contents.