Encryption

Encryption

parc a secret.parc data -pkey             # encrypt data
parc a secret.parc data -hpkey            # encrypt directory and footer too
parc x secret.parc -pkey -dp/out          # provide the key when reading
parc l secret.parc -pkey                  # with -hp, the key is required to list

• Algorithms: AES (default AES-256/CTR), Blowfish, Serpent and Twofish; size and mode can be selected, e.g. -ae=serpent-256/cfb.
• Key derivation: PBKDF2 with 200,000 iterations.
• Authenticated encryption: every block carries a truncated HMAC-SHA512 tag, so a wrong key or modified data is detected.
• Bare -p prompts for the password; bare -hp does too.
• Exit code 5 if the password is missing or wrong.
• Archives encrypted by older PArc versions can still be read and updated.

See Options and the details in FORMATO-PARC.md.