Bob ‘n Alice On Security

Helping to Avoid a False Sense of Security

Archive for June 2009

Lexar JumpDrive Secure Vulnerability

leave a comment »

Cruising through the archives I came across this report on a major Lexar JumpDrive Secure vulnerability. The password to the device is “encrypted” by xoring it and storing it in the nand flash. It’s trivially decipherable.

It’s an older example, but shows how a product called “Lexar JumpDrive Secure” simply isn’t secure, and professional cryptographers were clearly not involved in the design and implementation of the product.

As always, stay safe and avoid a false sense of security.

Written by Bob

June 13, 2009 at 15:49