IronKey boasts 'world's most physically and cryptographically secure' thumb drive

This isn't the first time we've seen one of IronKey's encrypted USB thumb drives 'round these parts, but if you're an enterprise user, government contractor, or some sort of renegade corporate spy you'll want to take note of this next item. The S200 is being touted as the world's first and only USB flash drive certified for FIPS 140-2, Security Level 3, and features: hardware-based AES 256-bit encryption in CBC mode, a tamper-resistant and tamper-evident rugged metal case, hardware-based malware protection, trusted network restrictions (which prevent the device from unlocking on untrusted PCs), and all the other goodies you expect from the company. Of course, this level of protection doesn't come cheap -- with their consumer grade products starting at $79.99 and ascending pretty quickly from there, we can only imagine what enterprise customers are shelling out. Then again, if you have to ask what it costs, this one is probably not for you. PR after the break.

IronKey Unveils World's Most Physically and Cryptographically Secure USB Flash Drive

IronKey S200 is the First and Only USB Storage Device to Achieve FIPS 140-2, Level 3 Validation; Delivers Advanced Cryptochip Featuring AES-256, Tamper-Resistance and Self-Destruction Circuitry

LOS ALTOS, Calif., July 13 /PRNewswire/ -- IronKey, maker of the world's most secure flash drive, today announced the launch of its S200 device for government and enterprise customers, featuring hardened physical security, the latest Cryptochip technology, active anti-malware and enhanced management capabilities.

Highlights of IronKey S200:

• The first and only USB flash drive to meet the rigorous government security requirements of FIPS 140-2, Security Level 3.
• Hardware-based AES 256-bit encryption in CBC mode.
• Tamper-resistant and tamper-evident rugged metal case.
• Secure management of encryption keys.
• Anti-malware capabilities in hardware provide an unprecedented layer of protection from malware and prevent its spread onto enterprise and government networks.
• AutoRun lock-down protects against worms.
• Read-only mode prevents malware on infected hosts from infecting IronKey devices.
• Trusted network restrictions prevent IronKey devices from unlocking on uncontrolled PCs.
• Optional anti-virus/anti-malware scanning cleans the devices in the background.
• Dual-channel architecture enables significant performance when writing large and small files to the drive.
• Includes extended-life flash memory capable of running high-bandwidth applications such as data backups, virtual machines, or bootable mobile desktops.
• Enterprise Management Cloud Service over the Internet for the enforcement of security policies, security and anti-malware updates, and the tracking and auditing of hundreds or thousands of devices.
• Optional Enterprise Management Server that customers can host themselves.
  

IronKey FIPS 140-2, Level 3 Validation:

• The IronKey S200 USB flash drive has been awarded FIPS certificate 1149.
• IronKey S200 includes the ability to prevent intruders from gaining access to Critical Security Parameters (CSPs ) held within the cryptographic module.
• The physical security mechanisms required at Security Level 3 validate that IronKey thumb drives can detect and respond to attempts of physical access, use or modification of the cryptographic module.
• IronKey includes the physical security mechanisms required for the validation including the use of production-grade components, hard potting material to encapsulate the chip circuitry and a hard metallic enclosure.
  

Enterprise Management Service Enhancements:

• Mac support for Silver Bullet service provides remote wipe, comprehensive tracking and rich reporting capabilities.
• Configurable time-out policy enables the ability to automatically lock devices after a specified period of inactivity.
• Search capabilities help to locate device information by user name, email address, serial number or other specific information.
• Enhanced backup and recovery capabilities from previous Password Manager to the Identity Manager.
• Management capabilities are available as cloud-based SaaS or on-premise server software for flexibility in meeting organizational requirements.
  

Supporting Quotes:

David Jevans, CEO at IronKey said:

"As one of the world's leading information security companies, IronKey is continually innovating to push the boundaries of security and ease of use. Our new IronKey S200 family of secure USB flash drives puts a whole new level of security into the hands of government, military and enterprise customers, at an affordable price. The IronKey S200 is the first and only USB flash drive to achieve the demanding FIPS 140-2, Level 3 security validation from NIST, giving even more proof that IronKey is the world's most secure flash drive. We are also releasing a suite of new enterprise remote management capabilities, available over the Internet from the IronKey managed service, or from our enterprise server software that companies can install and operate themselves."

Scott Crawford, research director for the security practice at Enterprise Management Associates said:

"FIPS 140-2, Level 3 is most often associated with devices such as high-confidence security hardware typically found in the data center. To have implemented this in a USB form factor is a noteworthy achievement--yet is just one of the many measures IronKey has integrated with its products, which speaks to IronKey's commitment to extending a distinctively high level of security to portable media devices."

SOURCE IronKey

[fanman @ Jul 13th 2009 10:03AM]

Ironkey? It'll be Iron-y when they just steal your computer instead.

[JimboJones @ Jul 13th 2009 10:19AM]

hmmm.... our company uses pointsec on all laptops, software policy does not allow to use anything else but IronKey

[Acidox @ Jul 13th 2009 6:54PM]

This is OLD.

My friend bought one of these months ago.

[Andrew Lazetera @ Jul 14th 2009 3:06AM]

VERY old, I was looking into the enterprise solution months ago, back in March, and I don't know how long it was out before that. Though, the certificate may be new. IronKey is simply the best.

[Jon @ Jul 13th 2009 10:05AM]

If it is that secure ... don't keep it on a USB drive - keep it on a secure server?

[JimboJones @ Jul 13th 2009 10:21AM]

yeah and cut the server from the network and the internet lol

[Jon Doe. @ Jul 13th 2009 11:27AM]

So I guess when I need to transport data offsite I dump the entire server into my backseat?

[kal326 @ Jul 13th 2009 10:05AM]

So what do you do when you forget your password for the drive? Bust out the StealSaw?

[Jon Doe. @ Jul 13th 2009 11:44AM]

You don't. Place the password in a secure location. I have a list in the spine (Not between the pages.) of a hard back at home. If someone finds that they deserve to steal my data.

[Sisyphus @ Jul 13th 2009 12:14PM]

Damn, that's a good idea. I have a 2,000+ book library at home.

What happens if I forget which book its in?

[Morten @ Jul 13th 2009 1:04PM]

Just put a note in every book. then it doesnt matter if you forget which it was

[Jon Doe. @ Jul 13th 2009 5:13PM]

Well then you make a crystal medallion that sits on a pole and where the sun shines at 12PM is where your list is. :P

[Nathan B @ Jul 13th 2009 6:06PM]

Awesome guys, now a cracker just has to break through glass in your house instead of AES256 to get to your data. Way to circumvent the security.

[JayC @ Jul 13th 2009 10:06AM]

It still has a grave vulnerability: the user.

[Jack @ Jul 13th 2009 11:35AM]

Makes me think of this:
http://xkcd.com/538/

[ratchetnclank @ Jul 13th 2009 10:12AM]

But will it blend?

[xValentine @ Jul 13th 2009 10:14AM]

They should have added a tracking device in it. Something like whan on Dogs, but smaller.

[Tom @ Jul 13th 2009 10:17AM]

I have one of the older models for work. It's really quite impressive. The chips are physically impossible to get to without destroying them, and if you enter the wrong password ten times in a row then the chip kills itself. Very useful for carrying data to a remote site, transferring between non-networked PCs, etc. I keep all my data on this when I travel, so even if my laptop is stolen, the data is with me.

[Pfanne @ Jul 13th 2009 10:48AM]

the best thing about these is, that you lose the cap after a month.
great!

[mocax @ Jul 13th 2009 10:54AM]

whatever happened to booby trapped secret caverns that require you to decipher some holy scriptures?

those were more exciting....

[Indefinite Implosion @ Jul 13th 2009 11:15AM]

I agree.
though they are slightly less portable...

[Jon Doe. @ Jul 13th 2009 11:26AM]

Yah but the Holy water is a beech on electronics.

[amarzilli7 @ Aug 18th 2009 9:11PM]

...........you tape it to the bottom of your_________,with a big firecracker then on the 3rd wrong tryit turns it self into a bic lighter, 7th wrong try it ignites the "wick" , 8th wrong try, you better start praying cause something is gonna hurt really really bad, 10th wrong try and it will make Lorena Bobbitt jealous.

[Gert @ Jul 13th 2009 11:15AM]

Your porn will never be safer.

[iSmoke,therefore emit death by breathing @ Jul 13th 2009 11:28AM]

hahahahaahhaaha

[Jon Doe. @ Jul 13th 2009 11:25AM]

Epic. Unless I'm missing something there is no mention of the drive size anywhere in the specs.

[sam @ Jul 13th 2009 11:52AM]

that's what she said.

[Muhammad-Oli @ Jul 13th 2009 12:27PM]

From their website: 1GB, 2GB, 4GB, or 8GB

[Willie Ha @ Jul 13th 2009 12:19PM]

isn't this old news?

[runbuh @ Jul 13th 2009 12:37PM]

Folks - this is a NEW IronKey that has passed the FIPS 140-2 **Level 3** tests. Sizes will go up to 16GB.

The previous IronKey passed FIPS 140-2 Level 2.

https://www.ironkey.com/S200_Launch

[marco @ Jul 13th 2009 1:05PM]

Not to take anything away from Iron Key’s publicity, but on the older keys, it never worked on desktop or laptop’s if you use PC Guardian’s Encryption Hard Drive software, that was the only product I know of that this key didn’t work with, when I say didn’t work, meaning the key’s admin software when you plug in the key would not launch, you get some error back, and if you look it up on the Iron Keys site, they indicate it does not work with Encryption Plus Hard Drive. So if you guys and gals plan to use this or implement this in your environment and your already using some type software encryption, do your homework first to see if the key will even work. But on the other hand I’ve talked to one of the reps from Iron key few years ago and they have some killer enterprise software that you can use in conjunction with the Key.

[sahaskatta @ Jul 13th 2009 2:47PM]

I reviewed the older generation for Skatter Tech, I have to say that it was pretty darn impressive. The best part was that it comes with a Tor built in and IronKey has setup their own secure servers across the world. You'll be able to browse the web anonymously with Firefox that runs right of the drive as well. Unfortunately it costs something around $80 for 1GB, which is just a tad bit too ridiculous. I wonder how much the 16GB model will cost! (yikes!)

anyways here's the review if anyone's interested:
http://skattertech.com/2007/11/ironkey-encrypted-flash-drive-review/

[Wwhat @ Jul 13th 2009 2:50PM]

If you see someone with one of these, start following him, but be careful, there'll be either money or fame in it when you do though.
And that is the flaw, it alerts people to you being a spook or high-end magnate with billions.

Or a very nervous person but those are easy to filter out by looking at them.

[rapier1 @ Jul 13th 2009 4:42PM]

I'm curious as to why they went with CBC as opposed to CTR mode. CTR is actually more secure and its a bit cheaper in terms of cycles and code required.

[oliver hart @ Jul 13th 2009 9:29PM]

always reminds me of gloria ironbox from family guy

[Josh @ Jul 13th 2009 11:39PM]

British Government take note. They could sure use a few of these instead of all those dodgy laptops they keep leaving on tube trains.

[Wwhat @ Jul 16th 2009 12:16PM]

So then how would plausible deniability work?


Haha, the british dictionary in FF is not familiar with the word 'deniability'