You want tarsnap.[1]
Edit to add: Colin Percival is the author of scrypt[2] and has worked extensively with FreeBSD's portsnap, so he knows what he's doing.
[1] http://www.tarsnap.com/
[2] https://en.wikipedia.org/wiki/Scrypt
To be more precise, I wrote FreeBSD's portsnap. (Also, freebsd-update.)
To be more precise, I wrote FreeBSD's portsnap. (Also, freebsd-update.)