Analyzing and breaking an externally encrypted HDD
1–10 of 16 posts
Re: Analyzing and breaking an externally encrypted HDD
#2LOL. This is about as secure as the spin dials on luggage. The hardware contains the pin # in memory that (presumably) decrypts the key, just like any mechanical lock contains the combination (in its physical configuration) that unlocks it.
And if the pin implementation is this hackneyed, I have a feeling that the so-called encryption is anything but.
Re: Analyzing and breaking an externally encrypted HDD
#3Great writeup on how to do a black box "cold-boot stepping attack" (https://www.usenix.org/system/files/conference/woot17/woot17...) on an encrypted HDD. This is why the recommendation is to use encrypted filesystems rather than relying on the obscure hardware device to do FDE securely. Which might seem obvious to most readers here, but I guess that self-encrypting hard disks are highly marketable.
Re: Analyzing and breaking an externally encrypted HDD
#4LOL. This is about as secure as the spin dials on luggage. The hardware contains the pin # in memory that (presumably) decrypts the key, just like any mechanical lock contains the combination (in its physical configuration) that unlocks it. And if the pin implementation is this hackneyed, I have a feeling that the so-called encryption is anything but.
Clearly, a company advertising encrypted drives could and should do better than this. Good on this researcher for calling out shoddy workmanship and posting about it.
This is a warning to people with access to highly sensitive data. But for everyday stuff, you do need to keep the value of your data in perspective.
It took a security researcher 40 hours to crack this thing. Should you store state secrets on this? No, it can be cracked by a determined adversary. Would I feel safe storing my personal financial data on a device like this one? Meh, sure, good enough.
Re: Analyzing and breaking an externally encrypted HDD
#5Great writing.
Currently, there is some person with $260M in Bitcoin on an encrypted drive.
https://www.techradar.com/news/ironkey-maker-couldnt-unlock-...
I am sure they would be willing to split it.
Re: Analyzing and breaking an externally encrypted HDD
#6Great writing. Currently, there is some person with $260M in Bitcoin on an encrypted drive. https://www.techradar.com/news/ironkey-maker-couldnt-unlock-... I am sure they would be willing to split it.
Ironkey are a bit different in that they were actually designed by hackers to be tamper-proof. The bar is a bit higher on that one. Alex Stamos jokingly offered to crack it for a percentage. AFAIK nobody has actually broken those yet.
Re: Analyzing and breaking an externally encrypted HDD
#7LOL. This is about as secure as the spin dials on luggage. The hardware contains the pin # in memory that (presumably) decrypts the key, just like any mechanical lock contains the combination (in its physical configuration) that unlocks it. And if the pin implementation is this hackneyed, I have a feeling that the so-called encryption is anything but.
Clearly, a company advertising encrypted drives could and should do better than this. Good on this researcher for calling out shoddy workmanship and posting about it. This is a warning to people with access to highly sensitive data. But for everyday stuff, you do need to keep the value of your data in perspective. It took a security researcher 40 hours to crack this thing. Should you store state secrets on this? No,…
Well, now that it's cracked, others will have a much easier time. And if you have more than $290 saved, you're already over minimum wage if it takes 40 hours to crack, so I would not consider that thing to be secure enough. Plus, even if you do consider these things secure enough, why would you pay extra to have less security when you can encrypt your normal drive that you already have for free and get a much higher level of security?
Re: Analyzing and breaking an externally encrypted HDD
#8Great writeup on how to do a black box "cold-boot stepping attack" ( https://www.usenix.org/system/files/conference/woot17/woot17... ) on an encrypted HDD. This is why the recommendation is to use encrypted filesystems rather than relying on the obscure hardware device to do FDE securely. Which might seem obvious to most readers here, but I guess that self-encrypting hard disks are highly marketable.
Some organisations (e.g. pharmaceutical companies, medical researchers) mandate that all employees have physically encrypted portable drives. The presumption is that "bad but enough encryption" is better than "non technical user can't work out how to use an encrypted filesystem". The really sensitive stuff is walked around on both…
Re: Analyzing and breaking an externally encrypted HDD
#9LOL. This is about as secure as the spin dials on luggage. The hardware contains the pin # in memory that (presumably) decrypts the key, just like any mechanical lock contains the combination (in its physical configuration) that unlocks it. And if the pin implementation is this hackneyed, I have a feeling that the so-called encryption is anything but.
> And if the pin implementation is this hackneyed, I have a feeling that the so-called encryption is anything but.
Totally. I'd be super curious to know is anyone's just tried plugging the hard drive into another controller. Won't surprise me at all if the "security" here is just not starting the USD drive controller without the correct pin being entered. There isn't any evidence here for enough hardware to turn that pin into an encryption key and encrypt/decrypt data on the fly. (I guess it's possible that's all built into the USB controller?)
Re: Analyzing and breaking an externally encrypted HDD
#10LOL. This is about as secure as the spin dials on luggage. The hardware contains the pin # in memory that (presumably) decrypts the key, just like any mechanical lock contains the combination (in its physical configuration) that unlocks it. And if the pin implementation is this hackneyed, I have a feeling that the so-called encryption is anything but.
Clearly, a company advertising encrypted drives could and should do better than this. Good on this researcher for calling out shoddy workmanship and posting about it. This is a warning to people with access to highly sensitive data. But for everyday stuff, you do need to keep the value of your data in perspective. It took a security researcher 40 hours to crack this thing. Should you store state secrets on this? No,…
What is even the point of encrypted drives over just using filesystem encryption managed by the OS? I'm guessing some minor portability benefit across OSs but is this really worth trusting the OEM over?