mirror of
https://github.com/borgbackup/borg.git
synced 2026-10-12 02:11:36 +00:00
Thomas WaldmannandClaude Fable 5.1
b724ece6b8
Every borg 2 mode has a borg key now: the AEAD modes (aes256-ocb, chacha20-poly1305) and the authenticated-sha256 / authenticated-blake3 modes. There is no compatibility with repositories older borg 2 betas created in a none-* mode. - crypto.key: remove ChecksumKeyBase, ChecksumKey, Blake3ChecksumKey and the SHA256NONE / BLAKE3NONE key types. - remove KeyBase.id_check_is_authentication: all borg 2 envelopes authenticate the chunk id, so RepoObj.parse verifies the id only at the BORG_ASSERT_ID places and the mandatory ones. - repo-create: always show the key / passphrase hint. - a borg 1.x "none" repository has unkeyed chunk ids, which no borg 2 mode has, so transferring it needs --chunker-params (docs updated). - tests: use authenticated-sha256 where none-sha256 was used as the cheap default mode, add make_test_key() for tests needing some key. The repository swap detection tests now re-label the repokey of the attacker's repository for the faked repository id. Co-Authored-By: Claude Fable 5.1 <[email protected]>