title: OpenSSL vs GPG for encrypting off-site backups?
body: <p>Given the option between using GPG and OpenSSL for local encryption before pushing archives to an off-site backup location, what are the benefits and drawbacks of each solution?</p>
  
  <p>Background:
  I currently manage a server infrastructure based on Ubuntu 14.04.1 with all current patches applied as they become available.</p>
  
  <p>All of these systems are headless, automatically built using vetted preseeds and automation tools, and run in virtual machines via KVM on uniform Intel-based hardware.</p>
  
  <p>We have a preference for Ruby, but a stronger preference for "doing things correctly". Because of both, we've chosen the "backup" gem as the means to create encrypted archives of data we want preserved, since it will create the same encrypted archives for a developer using Vagrant that it would in production, regardless of the mechanism by which it's transmitted. </p>
  
  <p>All software and configuration is managed via Puppet, so neither decision will have any impact on "user experience" or convenience. Either option will create relevant scripts to manage, verify, or restore from any backups created. </p>
  
  <p>Given that, does either encryption option offer any advantage against the other when used for this purpose?</p>