S3QL: an S3 FS with encryption, de-dup, immutable trees and snapshotting
I was recently looking into options for offsite, encrypted (at-rest & in-transit), deduplicated, snapshotted, backups to S3. S3QL was one of the options I investigated, but unfortunately their crypto is MAC-then-encrypt [0], which is no good.A small sample of the other options considered:    * EncFS + rsnapshot/rdiff-backup
        * Weak cryptography in EncFS [1]
    * Duplicity
        * Uses forward snapshots, so recovery takes longer with each successive snapshot, unless you upload a "fresh" copy of the data
    * ext4 on LVM on LUKS on a loopback device provided by s3backer [2]
        * OK I'll admit this one is pretty far out there, but it actually works decently well (ignoring the massive FUSE overhead)
        * Downside: a slight hiccup in network connectivity guarantees data corruption
    * Attic
        * Known data corruption issues with large datasets [3]

Does anyone know of anything that can provide the above requirements? At this point it's really more of a thought experiment, as I've decided to go with Tarsnap [4] for my use-case.[0]: http://www.rath.org/s3ql-docs/impl_details.html[1]: https://defuse.ca/audits/encfs.htm[2]: https://github.com/archiecobbs/s3backer[3]: http://librelist.com/browser/attic/2015/3/31/comparison-of-a...[4]: https://www.tarsnap.com/