If modification of your backups is possible then you should just sign them. Then it doesn't matter if your encryption is malleable or not. Why have just an inte

If modification of your backups is possible then you should just sign them. Then it doesn't matter if your encryption is malleable or not. Why have just an integrity check when you can have an authenticity check as well?