So I'm working with a client who wants the absolute highest level of security for his project.

I pitched him the idea of hardware user authentication with one of those encrypted USB drives with the keypads on them. The system is completely isolated from any network, as well as all physical access is biometrically secured.

I was thinking of using pamusb in conjunction with something like this USB drive from Amazon.

The only question I had was "Is the USB going to unlock the user without putting in the password?"

I'm not exactly sure how pamusb works, but if all it does is check UUID of the drive, then it might not work the way I might want. If anybody has experience with pamusb or encrypted flash drives, thanks!

  • 2
    Why are you preferring using encrypted USB drives over smart cards or devices that act similarly? – jrtapsell Jun 3 '18 at 23:45
  • Because enterprise hardware is getting in the way of the budget, if you know what I mean. – M. Loewenthal Jun 3 '18 at 23:46
  • Would U2F + local password be an acceptable way of authenticating? – jrtapsell Jun 3 '18 at 23:48
  • I'm sure there are many ways of being secure, I would just like to know how my system would work. – M. Loewenthal Jun 3 '18 at 23:49
  • How much of the USB is accessible before the PIN is entered? – jrtapsell Jun 3 '18 at 23:56

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.