2021/10/26 by Sergei Skorobogatov, Skorobogatov, Sergei · 1 voice · 1 citation
Computer Science · #Advanced Malware Detection Techniques #Business #Certification #Chaos-based Image/Signal Encryption #Competitor analysis #Computer hardware #Computer science #Computer security #Cryptographic Implementations and Security #Cryptography and Security (cs.CR) #Digital and Cyber Forensics #Embedded system #Encryption #FOS: Computer and information sciences #Flash (photography) #Flash memory #Internet privacy #Operating system #Political science #Security and Verification in Computing #USB #cs.CR
paper · pdf · doi:10.48550/arxiv.2110.14090
published in arXiv (Cornell University) (Cornell University) · 16 pages, 73 figures, Hardwear.IO conference 28-29 October 2021, Hague, Netherlands
arxiv created 2021/10/27 · openalex publication_date 2021/10/27 · arxiv published 2021/10/27 · arxiv updated 2021/10/28 · openalex created_date 2025/10/10 · openalex updated_date 2026/08/06
There are many solutions for protecting user data on USB Flash drives. However, the family of IronKey devices was designed with the highest security expectations. They are definitely standing above others by being certified to FIPS 140-2 Level 3 and also claimed as certified by NATO for Top-Secret use. Many encrypted USB drives had been evaluated and found insecure, however, no public research on IronKey devices was made. This feasibility study fills the gap by looking inside the IronKey family of devices. As a result the users of the IronKey devices could be assured about the real level of the security protection they get. Several generations of devices from IronKey family and competitors are teared down, their hardware solutions discussed and evaluated for possible attacks. Some potential flaws are exposed and those findings are likely to stimulate further research into specific solutions aimed to protect user data.