Bob ‘n Alice On Security

Cruising through the archives I came across this report on a major Lexar JumpDrive Secure vulnerability. The password to the device is “encrypted” by xoring it and storing it in the nand flash. It’s trivially decipherable.

It’s an older example, but shows how a product called “Lexar JumpDrive Secure” simply isn’t secure, and professional cryptographers were clearly not involved in the design and implementation of the product.

As always, stay safe and avoid a false sense of security.