You are here

USB Stick with Master Password ?

18 posts / 0 new
Last post
eke
Offline
Last seen: 16 years 1 month ago
Joined: 2008-12-30 10:24
USB Stick with Master Password ?

Hi,

I have a 8GB Kingston USB Stick but: wth if i loose the stick, forget it inside the workplace or if it get's stolen? Everyone can see my very sensitive data!

So here is my question: Do you know a USB Stick that asks for a Master Password if I stick it inside a foreign Computer? I know there are existing these Sandisk U3 Sticks, what exactly do they do? Maybe sb knows other solutions.

Happy Ney Year!
Smile eke

Geek45
Geek45's picture
Offline
Last seen: 15 years 1 month ago
Joined: 2008-09-11 22:20
Your best bet would be...

encrypt all the files you have.
A flash drive that has encryption software on it is a Lexar Secure.
My first flash drive, easy simple encryption.

!!

ottosykora
Offline
Last seen: 1 day 2 hours ago
Joined: 2007-10-11 17:48
hardware encryption

would be the need, this exists in various versions on the market. Sometimes rather expensive like 'ironkey'.

In fact, strict hardware encryption would be possible by the use of 3DES which can be implemented completely in hardware and this would be completely OS independent.
However since all usb sticks contain a controller, kind of processor, some suppliers use AES256 etc just as software solution stored inside the controller.
Some use even parts of windows system to do the work, this is not fair, this is not real hardware encryption then and will probably not work with Linux etc.
U3 changes the description of the partition and restores it when correct password is entered. Works with windows only, uses windows system files to do the job.
This does not mean the drive is somehow encrypted, all is still there , but the partition data are faked, so windows can not see it, actually with the newer versions of the U3 also linux can not see it just so easy.

Otto Sykora
Basel, Switzerland

dkulchenko
Offline
Last seen: 13 years 7 months ago
Joined: 2007-02-14 17:12
Truecrypt

Try TrueCrypt. You can search the forums for a portable version, but it's great, easy to use, and extremely secure.

ottosykora
Offline
Last seen: 1 day 2 hours ago
Joined: 2007-10-11 17:48
but only with admin rights ;-)

since driver has to be installed for it.

This makes the more and more upcoming hardware encryption solutions more portable and if real hardware solution then it will work on any OS.

Otto Sykora
Basel, Switzerland

dkulchenko
Offline
Last seen: 13 years 7 months ago
Joined: 2007-02-14 17:12
Problem

One problem with that, though. What if you forget a password? With software encryption, you can at least get your drive back and reformat. AFAIK, you can't do that with hardware encryption.

John T. Haller
John T. Haller's picture
Offline
Last seen: 5 hours 44 min ago
AdminDeveloperModeratorTranslator
Joined: 2005-11-28 22:21
Reset

Every drive I've seen with hardware encryption has the ability to reset the device (losing all data, of course).

Caveat: Most drives I've seen that are 'password protected' but don't have hardware encryption do not fully erase your data when you reset them so you can easily recover it with a simple unerase utility.

Sometimes, the impossible can become possible, if you're awesome!

dkulchenko
Offline
Last seen: 13 years 7 months ago
Joined: 2007-02-14 17:12
Eraser

You could always use Eraser Portable. Smile It can shred the remains after a reset.

John T. Haller
John T. Haller's picture
Offline
Last seen: 5 hours 44 min ago
AdminDeveloperModeratorTranslator
Joined: 2005-11-28 22:21
Heh

For anyone who missed the joke... the fact that you can reset these drives and then recover all the data means they're not secure Blum

Sometimes, the impossible can become possible, if you're awesome!

dkulchenko
Offline
Last seen: 13 years 7 months ago
Joined: 2007-02-14 17:12
So

So you're saying the contents are not actually encrypted, just password protected? If so, you can circumvent that just by plugging the drive into a Linux or a Mac box.

ottosykora
Offline
Last seen: 1 day 2 hours ago
Joined: 2007-10-11 17:48
well yes sometimes

some very old u3, asks me all the time if I want update since the version of the u3 software is insecure does in fact in some versions of linux not show properly when password protected, but I managed to copy simply sectors with dd from it.
With later versions this seems not work any more, the partition data is simply screwed up by the password protection somehow.

But other commercial sold password protection I was tempted and did spent some 20 usd or so, does not much more then make all files hidden and not much more.

Otto Sykora
Basel, Switzerland

John T. Haller
John T. Haller's picture
Offline
Last seen: 5 hours 44 min ago
AdminDeveloperModeratorTranslator
Joined: 2005-11-28 22:21
Not Quite

The "password protection" is in hardware and doesn't allow the drive to show up at the hardware level. Resetting the password (as you could do if you were to steal someone's password protected drive) is supposed to wipe the data for security. It just doesn't. It does a simple quick format leaving all the files intact and ready to be unerased by any unerase utility.

Sometimes, the impossible can become possible, if you're awesome!

silentcon
silentcon's picture
Offline
Last seen: 12 years 10 months ago
Joined: 2008-05-31 05:37
Since Truecrypt works only on

Since Truecrypt works only on Admin, any encryption software that works on limited accounts?

John T. Haller
John T. Haller's picture
Offline
Last seen: 5 hours 44 min ago
AdminDeveloperModeratorTranslator
Joined: 2005-11-28 22:21
No Drive Letters

No software encryption can mount a virtual drive without admin rights. Period. People need to understand that and stop asking. You want to be able to have an encrypted drive mounted as a drive letter on every PC, you need to buy a stick with hardware encryption.

You can encrypt individual files on a drive, but that has issues as well. In order to open said files, they must be copied somewhere outside the encrypted file store to be opened by OpenOffice.org Portable or whatever app is opening them. When done, they must then be deleted. If you copy them locally, these is the issue of leaving things behind even after deleting (unless you securely erase them which takes time and won't happen in a crash). If you copy them to the portable drive temporarily, the same issue applies, though it is harder to securely delete from flash media.

Sometimes, the impossible can become possible, if you're awesome!

SilentWalker
Offline
Last seen: 14 years 8 months ago
Joined: 2008-11-06 12:23
thats the thing with truecrypt...

it doesn't copy the files from the virtual partition onto the unencrypted hardware, its integrates the unencrypted data as part of RAM. this makes it much more faster to open, use, and save files encrypted with truecrypt and the actual copying of a file back and forth (from encrypted to unencrypted and vice versa) takes a lot of time. it also saves disk writes.

John T. Haller
John T. Haller's picture
Offline
Last seen: 5 hours 44 min ago
AdminDeveloperModeratorTranslator
Joined: 2005-11-28 22:21
Beside the Point

That's beside the current point. What I'm saying is that it's useless if you don't have administrative rights (and you won't at a net cafe, library, university and school PCs, hotel business centers, most offices, etc). The only thing that allows you to have encrypted files securely on most PCs you come across (that show up as a drive letter and don't need to be copied back and forth to some other location) is a drive with hardware encryption.

We're well aware of the advantages of TrueCrypt and it's an excellent solution if you're only running from your own computers.

Sometimes, the impossible can become possible, if you're awesome!

horusofoz
horusofoz's picture
Offline
Last seen: 1 year 5 months ago
Joined: 2008-04-03 22:45
@ John

Can I ask have you negotiated with any manufacturers that build usbs/portable hard drives with hardware encryption? If they had PortableApps.com branding you'd probably find people would trust their encryption a lot more as we trust your judgment on such issues. Could be a potential selling point with manufacturers:-)

PortableApps.com Advocate

ottosykora
Offline
Last seen: 1 day 2 hours ago
Joined: 2007-10-11 17:48
real encryption not but

as I mentioned, I have some strange software from ENCRYPTX , it is called SecurFlash and for many people it could be of some use, thought it is not full encryption and not doing anything similar to Truecrypt.
But it is payware, thought not too expensive.

Otto Sykora
Basel, Switzerland

Log in or register to post comments