(note to admin/mod: suggest move this to suggestions forum. thx.)
has any work been done on implementing LTO4 hardware encryption?
I understand that bacula has some pre/post scripting support; haven't seen this in amanda.
Not initially after a complex (read $$$) KMS option, just something to deliver/grok the requisite AES-GCM keystring in-band via SPIN/SPOUT before the tape dump/restore actions.
Perhaps the attached .c bits could be a useful starting ground for any interested committers.