0

So I have read some articles (this being one https://nakedsecurity.sophos.com/2010/01/05/flash-drive-manufacturers-warn-hackers-decrypt-secure-usb-sticks/) that point out some flaws with certain encrypted USB sticks. Are all encrypted USB sticks subject to these kinds of problems or are there ones out there that are stronger than others?

closed as too broad by schroeder, Xander, TildalWave, Mark, Rory Alsop Nov 6 '14 at 8:25

Please edit the question to limit it to a specific problem with enough detail to identify an adequate answer. Avoid asking multiple distinct questions at once. See the How to Ask page for help clarifying this question. If this question can be reworded to fit the rules in the help center, please edit the question.

  • Each manufacturer is going to build their devices differently. – schroeder Nov 5 '14 at 15:24
  • Encrypted USB sticks cover the full spectrum from "data stored unencrypted with 'security' provided by a custom driver" to "data stored encrypted, following current best practices for full-disk encryption". – Mark Nov 5 '14 at 20:50
3

There is no reason it isn't possible to build a secure USB stick that actually requires password entry to decrypt which isn't present on the stick. Short of putting a keypad on the actual device though, there is always the possibility of logging the password when connected to an insecure system (and even with a keypad, an insecure system could tamper with any partition that is opened up to it.)

Whether any particular USB stick fits this though depends on that particular USB stick manufacturer's design. There are certainly plenty of ill conceived security products available.

Not the answer you're looking for? Browse other questions tagged or ask your own question.