[tveita]

Tarsnap generates a key file - your password is not used directly to derive the key. A password is used for your account, and for encrypting the key file.