SecurityRatty: The Doghouse: Tornado Plus Encrypted USB Drive

This is cache of http://www.schneier.com/blog/archives/2008/09/the_doghouse_to.html. Cache is the snapshot of article that we took when we index feed.
To see original page click here.
We are not affiliated with the authors of this article and not responsible for its content.

The Doghouse: Tornado Plus Encrypted USB Drive

2008-09-12 12:05:49 by schneier in Schneier on Security

Don't buy this:

My first discussion was with a sales guy. I asked about the encryption method. He didn't know. I asked about how the key was protected. Again, no idea. I began to suspect that this was not the person I needed to speak with, and I asked for a "technical" person. After a short wait, another sales guy got on the phone. He knew a little more. For example, the encryption method is to XOR the key with the data. Those of you in the security profession know my reaction to this news. For those of you still coming up to speed, XORing a key with data to encrypt sensitive information is bad. Very bad.