🚀 go-pugleaf

> Tzn. nie jest wazne czy rozwiazanie spelnia jakies sensowne warunki
> (szyfrowanie to raczej powazne zastosowanie), tylko ze trzeba kiwnac
> palcem? No coz, trzeba, jesli ktos nie chce miec tylko iluzji.

Myślałem o produkcie:
http://www.kingston.com/flash/DTvaultPrivacy.asp?id=3
------
Datasheet 

Kingston's DataTraveler® Vault Privacy Edition USB Flash drive is assembled
in the U.S. for organizations that require a secure way to store and
transfer portable data. The stored data is 100 percent secured by
hardware-based, 256-bit AES encryption to guard sensitive information in
case the drive is lost or stolen. Its durable, aluminum casing provides
added protection. 

DataTraveler Vault - Privacy Edition is backed by a five-year warranty,
free tech support and legendary Kingston® reliability. 

Features/Benefits: 

Full Encryption – 100 percent of stored data is protected by
hardware-based, 256-bit Advanced Encryption Standard (AES) 
Fast1 – data transfer rates of up to 24 MB/sec. read and up to 10 MB/sec. 
Secure – drive locks down and reformats after 10 intrusion attempts
Enforced password protection – complex password is user set with minimum
characteristics to prevent unauthorized access
Fully Supports Macintosh OS
Easy to use – no admin rights or application installation required
Customizable** – preload content, password length, maximum number of
password attempts
Cologo available** – add your companys logo to increase brand recognition
Guaranteed – five-year warranty with free customer support
Durable – aluminum casing
Waterproof2 – protects against water damage

------
Kingston w dokumencie:
http://www.kingston.com/flash/datasheets/DTVault_VaultPrivacy_WP.pdf
pisze tak:

2.0 Hardware-Based, Real-Time Data Encryption
Cryptography is the science of encrypting and decrypting data using a
special “key” to encode and decode the data. Unencrypted data (or files)
are processed through an encryption engine (either in software or in
hardware) to produce an encrypted file; without the exact key, the data is
unusable.
Kingston DT Vault and DT Vault – Privacy Edition drives feature one of the
industry’s best, most robust data encryption capabilities. Their encryption
technology is based upon the same standard used in high-security
applications – the Advanced Encryption Standard (AES). Keys are sequences
of bits (256 in the case of AES-256) which are used by the
encryption/decryption engine to uniquely process the data.

oraz:

-----
With DT Vault – Privacy Edition drives, a Login program is automatically
launched to allow for the entry of a valid password. Once the password is
successfully entered, the data content of the drive is visible and
accessible.
When data is written to a privacy zone of either the DT Vault or the DT
Vault – Privacy Edition, it is encrypted by the AES Encryption and
Decryption Co-Processor in real-time, and then written to the Flash memory
storage. Similarly for reads, the data is decrypted real-time on the DT
Vault drive and then sent to the host computer.
Without the unique 256-bit key, which is uniquely generated for the DT
Vault utilizing a true random number generator, encrypted data is nearly
impossible to decode.
-----

I teraz pytanie. Z opisu wynika, że mam tu sprzętowe szyfrowanie
zapisywanych danych algorytmem AES 256. Skoro tak byłoby to dlaczeog da sie
to relatywnie łatwo złamac ??? GDzie jest luka ? Bo z komentarzy wnosze, że
trueCrypt jest skuteczniejszy...

Moze jestem leniwy, i chciałbym, żeby pendrive zmusił mnie do hasła bez
dodatkowego klikania. A że czasem musze trochę ważnych danych przenieść, to
jakoś nie widzę się z niezaszyfrowanym flash-dyskiem. Za dużo takich dysków
ginie i za dużo ludzi potem drży. Kiedyś prawnik dał mi na chwile swojego
pen-drive a potem drżał, czy aby mu nie wyczytałem danych z jego
kalncelarii=rózne trudne sprawy. A przecież on może kiedyś tego pena
zgubic....