Why you did not use Raid with fiber channel difference backup mirror by hardware?
Yes, ii know it is not common see, but it has a lot of advantes... your raid is just raid 0 with 6 hdds (yes stripping), each hdd has built in hardware encription, so attaquer (in offline mode) would need to guess 6 passphares, to be true i preffer hdd with usb port for key... too expensive i know... power on hdd need the dongle (1GiB) connected, attaquer would need such 1GiB, hdd copy such gigabyte to internal ram (yes the hdd has a 2 gigas cache, one for key, one to do fast read/write cache, it also has a red/green diode, when green you can disconnect the usb from the hdd, key is now on hdd internal ram... with 6 of this you get hardware encryption very secure... attaquer would need to guess upto six gigabytes of keys, wow! Over that you use a 6 sata-iii raid controller, with fiber channel auto differential remote backup... you get the best!
How works? Easy: power on with six usb 1GiB dongles connected each one to one hdd directly (the hdd has a special port for that, no need for a weak passphrase of 64 chars, it use a whole one gigabyte passphrase), so there are 6 gigas of key in total, after all goes on green, remove the six usb pendrive and put them on a secured place (like banks cases but in your building), then tha raid 0 (striping) will see six drives and will make a very fast (near 4GiB/s) big disk where you can put your O.S., now i talk about secure data against fails, no need for backups, neither raid 6 (better than raid 5 but also worthless), that raid controller i talk has a fiber channel connect to a difference remote backup storage, so you will have such huge disk mirrored but with historic sector per sector backup, so you can have online the whole disk state at every second you need, dissaster came, well, just replace the hdd, and tell the fiber channel to see the state it had at a specific second of a specific time, it will put such state onto new disks.
Price is the worst part... controlles cost neare 10 thousand pounds, each disk cost near 2 thounsand, and backplane for store such difference will require a whole building sercive on another planet city... cost per month and gigabyte could be too much, but again it is not about price what i am talking, it is for securing.
Well to be true i only use a simple XOR cypher, one byte of data with its own one use byte of key, so attaquer would see a key lenght equal to lenght of data, no need for comples algoritmics, just a simple XOR is enough, to make it more difficoultto attaquer, position of key byte is calculated (not equal to data byte position) with a fast algorithmic.. in other words: Cyper[X]=Plain[X] XOR Key[MyAlgorith(X)], with Key length >= Plain length. This is mathematically demostrable to be 101% secure, if you do not known the key, demostration is as simple as this phrase: you can have as much different keys as possible data states. So if you ha a 8GiB pendrive you will have a 8GiB key, so that makes 2^8GiB different keys, and you have 2^8GiB possible different data states, each bit of data is cyphered with its own bit of key, each bit of key is used only for one bit of data, if you try a brute force, all possible keys are a set that is equal to the set of possible data states, so no way to know which one is the correct. The key is only used for such disk.
It is also possible to use a lees size key as that MyAlgorith will make the same bit of key be used on a way that attaquer would not be to know/guess, such algorith use part of the key to create an XtoY translation, for multiple X values will give same Y (beware not to use a simple mod operation, it must be more complex), so a simple 8GiB of key will generate the same set as a full hdd lenght key, complex to demostrate but i will try: given an X position of data, what byte of key will be used? DPosition on key data, dpends on key data an on such X, but in a way that X+1 is not Y+1 where X is position on plain data and Y is possition on key data, that will make brute force to need to test each byte of cyphered data be tested with each byte of a test key, so at end it will be a set with 2^hdd size possible states. Basic is: you do not havesuch 8GiB key, so you create a 2^8GiB key set,with each of that keys you must test the de-cypher, but since position of key used for each byte of data also depends on another shrot passphrase you need to chech each byte of data with 2^(8*64) possible positions on key (key lenght is 8GiB = 2^33) so in practice each byte of data would need to be tested with each byte of the key, if the key has all 0 to 255 byte possible vales along it, it will reduce the tes so each byte needs to be XOR with each 2^8 (256) possible vales, so 256 possible values for such byte are getted for each byte of data, hence it is mathematically impossible to know what is the good one and since this procces must be followed with each byte, you will get a brute force attach that gives a 2^(size of hdd) possible plain data, attaquer will not be able to guess any plain data byte.
The algorith works on byte basics, but such idea is also valid for 512 byte words (instead of 1 byte words), and also for any lenght.
Hence, to be secure the best is have a key huge in size and a good X to Y algorithm and use a simple XOR for cypher/decypher.
Note: The backup is done by hardware sending each sector write operation to a historic remote storage server, so you can get the state at a given milisencond ot datetime... such info sent to remote server is the real data that is writted on disk, so it is cyphered, not plain... it is like cloning hard disk plates info.
How that fiber channel works? easy: hdd when internally writes data to plates, send a copy by a fiberchannel to the raid controller, then raid controller re-send that data by its externall fiber to a remote big, verybbig storage system.
How rebuil works? Easy: controlles asks for a datetime state (exact milisencond), then remote server looks for each hdd sector table (uses the most near state for such sector, with datetime lower or equal) that sector is sent to the controller and controller send it back to hdd by fiber, then hdd write it to plates,... after rebuild all hdds will have the exact clone it had at that milisecond.
All this working with snapshot points on valid stable partition states, work all togetherto make a huge secure and safe storage system.
Week point as all up systems: attaquer atacts while system working, by a middle man attach, with usb debug devices that clone mainboard bus info, etc... while will be impossible to log keys used (unless admin that boots the server would be an idiot) it can get the clear data going in mainboard, but since that is not possible to be avoided (physical acces to mainboard requiered for the attaquer) the system is as secure as the other weak parts are (internet connection, etc)... laught, but this is true: an idiot admin boots the computer while seeing a huge amount of strabe cables and devices was addes to computer, how such silly person has booted it? If you see computer has been manipulated in offline, do not boot it till you have confirmed such manipulations are correct and secure.
Otal price of a working project (for testing suh config): 1 millon pounds per month, for a one year working test proyect.
P.D.: i am not authorised jey to reveal raid controller name, but can be founded some test (with censored parts) videos on google and youtube, i do not know if links are admit on this forum, and i do not want to be seen as a vendor.
