Encrypted USB sticks - how do they work?

longwalks1

am after password protecting a lot of files on my memory stick, was going ot download a free encryption program for my current pen drive, but read that you can only open docs on a PC with that software on it, not ideal for work

The 'ready password enabled' USB drives you can buy, basically how do they work?
Are they OK to use on any PC/laptop without needing software to be installed on that PC?

coxy17

Take a look at Truecrypt. It is free for personal or business use. You can run it in Traveler Disc mode which means it doesn't have to be installed on the system you are using.

Read the documentation for details. You may have to be a Windows administrator for it to work correctly/securely.

free4440273

truecrypt (free) allows the option of not having to install on each machine . admin privileges might be necessary though .

Stompa

coxy17 wrote: »

Take a look at Truecrypt. It is free for personal or business use. You can run it in Traveler Disc mode which means it doesn't have to be installed on the system you are using.

You still need admin rights on the PC you're using though.

Lil306

Irongate, one of the best makers. Here's the info from their site

https://www.ironkey.com/hardware-encryption

Hardware Encryption

All user data is encrypted with AES hardware encryption that meets FIPS 140-2 Level 3 requirements.
A True Random Number Generator (TRNG) on the IronKey Cryptochip generates the encryption keys used to protect your data in IronKey hardware when the drive is first activated. This ensures maximum protection via the encryption ciphers. Unlike with software-based encryption, which stores keys on the host PC hard disk and loads them into RAM memory, IronKey encryption keys are never stored or loaded onto the PC, so they can never be compromised through methods such as Cold Boot attacks or other exploits.
Unlike software-based encryption, IronKey's "always-on" hardware encryption cannot be disabled either accidentally or on purpose.

Fast and Reliable

Since the onboard Cryptochip manages the keys and performs the encryption routines, it won't slow the host PC processor and will run more securely than any software-based encryption system. IronKey also uses high-grade, high-speed flash memory.
State-of-the-Art Cryptography

IronKey follows industry best practices and uses only well-established and thoroughly tested cryptographic algorithms. All of your data on the IronKey drive is encrypted in hardware using up to 256-bit AES encryption implemented in Cypher Block Chaining (CBC) mode. CBC is a more secure implementation than the alternative Electronic Codebook (ECB) mode that some encryption products use.
Cross Platform

All IronKey devices work with Windows 2000, Windows XP SP2 or later, and Vista without administrator privileges or installing any software or drivers. IronKey drives will also work on Macintosh computers running Mac OS 10.4 or later, or Linux computers running Linux 2.6 or later. Just plug it in and go—there is no software to install.

kwikbreaks

They look great but at close to 10 times the cost of a standard thumb drive + Truecrypt I think I'll be sticking with the cheapskate option.

If you are using software encryption such as Truecrypt then you'll either need to install it on the host or (for Truecrypt) prepare the thumbdrive as a Traveller and the software will be put on it for you to run from that.

I started using an encrypted drive after mine came off my keyring - there some stuff on it I'd rather keep to myself. Luckily the drive was still laying on the ground by my car when I went back to it.

===

On the subject of admin priviledges - I only have a user account on the machine in this office but can access my encrypted drive OK. I've just copied the portable version of Truecrypt onto it rather than install (which I can't) or prepare the drive as a Traveller which makes it obvious there is something on it - just encrypting the whole device makes it look like an unformatted disk to Windows.

Stompa

kwikbreaks wrote: »

They look great but at close to 10 times the cost of a standard thumb drive + Truecrypt I think I'll be sticking with the cheapskate option.

There are much cheaper alternatives, for example:

http://www.kingston.com/ukroot/flash/dt_Locker.asp

http://www.amazon.co.uk/Kingston-8GB-DataTraveler-Locker-Encryption/dp/B002S2KTYU/

kwikbreaks wrote: »

On the subject of admin priviledges - I only have a user account on the machine in this office but can access my encrypted drive OK. I've just copied the portable version of Truecrypt onto it rather than install (which I can't) or prepare the drive as a Traveller which makes it obvious there is something on it - just encrypting the whole device makes it look like an unformatted disk to Windows.

I'm not quite sure how you manage that! FWIW this is what TrueCrypt themselves say:

http://www.truecrypt.org/docs/?s=non-admin-users

mr_fishbulb

I've got the Kingston DataTraveller Vault edition (more expensive then the DataTraveller+, but I didn't pay for it). Very happy with it.

Don't need admin rights to get to the encrypted data, and it even works on Linux machines.

hanwellmike

Many thanks Stompa (and mr_fishbulb). The Kingston Data Traveler Locker+ is only £10 for the 8gb version and it looks to be just what I wanted. I did not know there was a line of secure flash drives. I will definitely get one.

kwikbreaks

Stompa wrote: »

I'm not quite sure how you manage that! FWIW this is what TrueCrypt themselves say:

http://www.truecrypt.org/docs/?s=non-admin-users

Interesting. It definitely works. Maybe it's because they are still running XP here?

====

Just looked - it's actually an administrator account now but never used to be on the previous machine I had????? I've no idea what they are playing at and from the looks of things neither have they

====

I read the reviews on that Kingston Locker and it looks to be excellent so I've ordered one.

Stompa

hanwellmike wrote: »

Many thanks Stompa (and mr_fishbulb). The Kingston Data Traveler Locker+ is only £10 for the 8gb version and it looks to be just what I wanted. I did not know there was a line of secure flash drives. I will definitely get one.

Just be aware that, unlike the Vault, the Locker+ is not Linux compatible (if that matters to you).