For what it's worth, it has a good track record, but yes you're totally right that restic is not exactly commercial-grade software with proper guarantees. In o

For what it's worth, it has a good track record, but yes you're totally right that restic is not exactly commercial-grade software with proper guarantees. In one of the early talks at a local hackerspace, the author did also demo decrypting the data manually if something got somehow broken. The tool is just a layer on top of relatively straightforward cryptography. From what I remember (I looked at this in 2018 so forgive any errors), you'd have to write a script that iterates over the index where it says which blocks are in which files (since it's deduplicated) and decrypt it with some standard AES library. Perhaps as a security consultant this seems easier to me than it does to others, though, but it's not as if you're without hope if the tool did break, or as if you couldn't just download a previous version from the GitHub releases page.