I was recently looking into options for offsite, encrypted (at-rest &amp; in-transit), deduplicated, snapshotted, backups to S3. S3QL was one of the options I investigated, but unfortunately their crypto is MAC-then-encrypt [0], which is no good.<p>A small sample of the other options considered:<p><pre><code>    * EncFS + rsnapshot&#x2F;rdiff-backup
        * Weak cryptography in EncFS [1]
    * Duplicity
        * Uses forward snapshots, so recovery takes longer with each successive snapshot, unless you upload a &quot;fresh&quot; copy of the data
    * ext4 on LVM on LUKS on a loopback device provided by s3backer [2]
        * OK I&#x27;ll admit this one is pretty far out there, but it actually works decently well (ignoring the massive FUSE overhead)
        * Downside: a slight hiccup in network connectivity guarantees data corruption
    * Attic
        * Known data corruption issues with large datasets [3]
</code></pre>
Does anyone know of anything that can provide the above requirements? At this point it&#x27;s really more of a thought experiment, as I&#x27;ve decided to go with Tarsnap [4] for my use-case.<p>[0]: <a href="http:&#x2F;&#x2F;www.rath.org&#x2F;s3ql-docs&#x2F;impl_details.html" rel="nofollow">http:&#x2F;&#x2F;www.rath.org&#x2F;s3ql-docs&#x2F;impl_details.html</a><p>[1]: <a href="https:&#x2F;&#x2F;defuse.ca&#x2F;audits&#x2F;encfs.htm" rel="nofollow">https:&#x2F;&#x2F;defuse.ca&#x2F;audits&#x2F;encfs.htm</a><p>[2]: <a href="https:&#x2F;&#x2F;github.com&#x2F;archiecobbs&#x2F;s3backer" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;archiecobbs&#x2F;s3backer</a><p>[3]: <a href="http:&#x2F;&#x2F;librelist.com&#x2F;browser&#x2F;attic&#x2F;2015&#x2F;3&#x2F;31&#x2F;comparison-of-attic-vs-bup-vs-obnam&#x2F;#cbbe599389a20c787a74b137dc78fb1a" rel="nofollow">http:&#x2F;&#x2F;librelist.com&#x2F;browser&#x2F;attic&#x2F;2015&#x2F;3&#x2F;31&#x2F;comparison-of-a...</a><p>[4]: <a href="https:&#x2F;&#x2F;www.tarsnap.com&#x2F;" rel="nofollow">https:&#x2F;&#x2F;www.tarsnap.com&#x2F;</a>