Opinion on encryption strategy

[saverio_miroddi]

I'm currently choosing the strategy for encrypting the backups of the application I work on, and I spent the last couple of hours googling around.

Now, since I'm using mysqldump (for now) on the server, whose results are sent to an offline location, I'd like to use something along the lines of

mysqldump my_database | magic_encryption > dump.sql.enc

this would be a requirement.
the other requirement is of course, an encryption strong enough for confidential data.

now, the strategy I chose is this:

* generation of a gpg keyring on the server, using a phony recipient, using a 2048 bit ELwhatever algorithm
* move the secret keyring on a separate location (e.g. my desktop)

and now, I would schedule the dumps filtering through: 'gpg -r phony_recipitent --encrypt', and decode from my separate location using the keyring 'gpg --no-default-keyring --secret-keyring /my-secret-keyring.gpg --decrypt'

is this an appropriate choice for the encryption, from the perspectives of speed, simplicity and safety?

thanks!
saverio

[jmadero]

I think that should be fine. You can also set up an encrypted partition using something like cryptkeeper but your method should be fine