Format of --encryption-key-file for fdbbackup/fdbrestore

Hey folks,

Hopefully a quick one, I’m just looking for confirmation. We’re looking to use FDB’s encryption at rest facilities for backups, --encryption-key-file.

However I’m not finding any reference in the documentation to the format of the file, the help says:
--encryption-key-file The AES-128-GCM key in the provided file is used for encrypting backup files.

So my educated guess is a file with 16 bytes of random data, generated with openssl rand 16 or similar.

I’m happy to just try it, but I’m of course cautious when it comes to backups. :smiley: Can anyone confirm?