Recognize-Security

4 Responses to “Breaking the IronKey (literally)”

1. Dave_IronKey says:

   May 28, 2009 at 02:14

   Trancer,
   You’ve still got to get through the epoxy without damaging the chips, but even then, you’ve got the crypto and key protection to deal with.

   The case you show is an older IronKey design. The current cases are a single extruded assembly and there is no label plate to get off. There is a top plate on the current design, which goes around the USB connector, and it has teeth which engage into the case. This whole thing is epoxied. It’s a highly robust design that has been submitted for FIPS 140-2 Level 3 validation, which tests the tamper resistance to a high level.

   Dave @ IronKey
2. Trancer says:

   May 28, 2009 at 09:26

   Dave, I personally think the IronKey is a great product and I’m glad to hear you’ve got a newer design. This post is a joke (Categories: LOLz) don’t take it too seriously :)
3. Justin Trent says:

   May 28, 2009 at 16:31

   Dave,

   Glad to see a modified form of the case is coming. Currently, at least according to the device’s official FIPS security policy registered at NIST, my users are supposed to use a hair dryer to open it up and check the epoxy themselves on a periodic basis.

   I’ve been very worried that someone would yank the devices off desks when they found out users weren’t doing this (for obvious reasons). Hopefully this new design will improve things.
4. Anhldbk says:

   July 1, 2009 at 08:40

   You’ve got a good sense of humor! :D