Ask Ubuntu is a question and answer site for Ubuntu users and developers. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm using Deja Dup on Oneiric Ocelot.

How can I make it use AES 256 as the algorithm for encryption?

Or for that matter, how can I control which encryption algorithm is used?

Deja Dup uses duplicity which in turn uses GnuPG. GnuPG uses CAST5 by default, but it also supports AES-256. However, I have no idea what parameters Deja Dup passes to duplicity and what parameters duplicity passes to GnuPG. So... how can I control which algorithm is used?

share|improve this question
up vote 2 down vote accepted

I know this is a bit late but if you put s2k-cipher-algo AES256 in ~/.gnupg/gpg.conf then all your deja-dup backups will be encrypted with AES256. The only downside to this is that if you didn't have this option enabled from the first backup, all your other backups become pointless at that point because you'll need to delete them all and start over. So before you set the option please pick your backups for files that need to be kept.

share|improve this answer
Thanks, anyway, I started using duplicity directly. Much more control and I know what's going on. – user12681 May 12 '12 at 12:07
Not sure this is accurate - from the manual, s2k-cipher-algo is used for encrypting private keys, whereas just plain "cipher-algo" determines the symmetric algorithm. (and the default is Blowfish) – Adrian Oct 2 '15 at 15:26

Per Michael Terry, "Deja Dup uses the default in GnuPG, which as of this writing is CAST5. This can't be changed via Deja Dup."

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.