Apps and Software By Lee Mathews Apr. 25, 2014 10:28 am
Not everyone needs a way to tote around Edward Snowden-sized secrets in a convenient little package, but a bit of extra privacy and security is always welcome when it comes to our data. The Crypto Stick might be just what the doctor ordered.
Right now, the device is in its beta stage. Inside that nondescript, black plastic housing hides a small PCB with a microSD slot and a smart card reader. Storage is fully encrypted, and all decryption operations take place on the device. None of the three private keys (signature, encryption, authentication) are ever at risk of being exposed because they never leave the Crypto Stick. To access your data, you simply punch in a PIN when prompted.
CryptoStick also fully supports hidden encrypted volumes (like the ones you can create with TrueCrypt). You can create up to four on a single stick. The goal is to provide you with “plausible deniability” even if you have to turn over your primary PIN to the bad guys. They might be able to see your root folder, but not the hidden volumes — which you could claim you had no idea were there in the first place.
One key way the Crypto Stick is different than secure flash drives you might have seen before — like IronKey or the encrypted drives made by Kingston, Imation, or Kanguru — is that the whole thing is open source. From software to firmware to hardware, the Crypto Stick is open source. Even the included smart card utilizes OpenPGP.
And because the Crypto Stick uses a smart card as one of its authentication layers, you can also use it as part of a two-factor login on numerous websites and loads of apps. It’s a nice alternative to setting up your phone, especially in an era where smartphones are a top priority for thieves.
The Crypto Stick is compatible with Windows, Mac, and Linux systems. If you’re comfortable experimenting with non-final firmware, you can order up a beta version of the Stick right now. They sell for €149 on the German Privacy Foundation’s website.
More...
Right now, the device is in its beta stage. Inside that nondescript, black plastic housing hides a small PCB with a microSD slot and a smart card reader. Storage is fully encrypted, and all decryption operations take place on the device. None of the three private keys (signature, encryption, authentication) are ever at risk of being exposed because they never leave the Crypto Stick. To access your data, you simply punch in a PIN when prompted.
CryptoStick also fully supports hidden encrypted volumes (like the ones you can create with TrueCrypt). You can create up to four on a single stick. The goal is to provide you with “plausible deniability” even if you have to turn over your primary PIN to the bad guys. They might be able to see your root folder, but not the hidden volumes — which you could claim you had no idea were there in the first place.
One key way the Crypto Stick is different than secure flash drives you might have seen before — like IronKey or the encrypted drives made by Kingston, Imation, or Kanguru — is that the whole thing is open source. From software to firmware to hardware, the Crypto Stick is open source. Even the included smart card utilizes OpenPGP.
And because the Crypto Stick uses a smart card as one of its authentication layers, you can also use it as part of a two-factor login on numerous websites and loads of apps. It’s a nice alternative to setting up your phone, especially in an era where smartphones are a top priority for thieves.
The Crypto Stick is compatible with Windows, Mac, and Linux systems. If you’re comfortable experimenting with non-final firmware, you can order up a beta version of the Stick right now. They sell for €149 on the German Privacy Foundation’s website.
More...
