TARSNAP-KEYREGEN(1)

okay so bestie 💖 this is tarsnap-keyregen(1) — the General Commands Manual page — and it's literally here to help you generate a key file for tarsnap-recrypt(1). no cap, let's get into it. ✨

🌸 NAME 🌸

tarsnap-keyregen — generate a key file for use with tarsnap-recrypt(1) 🎀

✨ SYNOPSIS ✨

tarsnap-keyregen --keyfile key-file --oldkey old-key-file --user
                 user-name --machine machine-name [--passphrased]
                 [--passphrase-mem maxmem] [--passphrase-time maxtime]
tarsnap-keyregen --version

💅 DESCRIPTION 💅

Okay so here's the tea: tarsnap-keyregen generates a set of cryptographic keys that are compatible with an existing set of cryptographic keys. Then it registers with the tarsnap server, and writes a key file for use with tarsnap-recrypt(1) and tarsnap(1). 🦋

Now, what does compatible even mean here? It means it is possible to re-encrypt archives stored with the first set of keys to be stored with the second set of keys. This is required because Tarsnap has some keys which need to stay the same when re-encrypting data; otherwise, existing archives will become unreadable and cannot be used for deduplication. 😭 that part is serious — do not skip it, fr fr.

• --keyfile key-file — specifies the name of the file in which to write the newly-generated keys. 💖
• --oldkey old-key-file — specifies the name of the file containing the old keys. 🗝️
• --user user-name — specifies the name (i.e. email address) of the Tarsnap account. yes, email address, iykyk. 📧
• --machine machine-name — specifies a name which will be displayed in accounting reports so that you can see how much data each machine is storing. main character energy for every machine. 👑
• --passphrased — if specified, the user will be prompted to enter a passphrase (twice) to be used to encrypt the key file. 🔐
• --passphrase-mem maxmem — if specified, a maximum of maxmem bytes of RAM will be used in the scrypt key derivation function to encrypt the key file; it may be necessary to set this option if a key file is being generated on a system with far more RAM than the system on which the key file will be used. 🧠💥
• --passphrase-time maxtime — if specified, a maximum of approximately maxtime seconds will be used in the scrypt key derivation function to encrypt the key file. ⏳
• --version — prints the version number of tarsnap-keyregen, then exits. that's it, that's the whole vibe. 👋

---

xoxo, source/version Debian · date March 20, 2025 · TARSNAP-KEYREGEN(1) out. periodt. 💅✨