Posts

Safe and transparent protection of all private data on the USB drive with no backdoor.

Do not underestimate security of your data. Thefts of data and entire computers are a daily matter. Both individuals and enterprises lose top secret financial data and for some it costs reputation. In the light of the latest news on FBI wanting to require all encrypted communications systems to have back doors really undermines the right for privacy. Lately the Privacy and Security issues are very much talked about and taken in consideration.

No backdoor

Recently we’ve been asked if our encryption software Rohos Mini Drive (freeware) and Rohos Disk Encryption (shareware) have backdoors. Our answer is No. Rohos team claim its encryption programs have no backdoors. So you can sleep safe and sound knowing that nobody will be able to access your encrypted personal data unless you give them the password.

Also we have been asked how we could prove it. The only way to prove it would be to open the source code which we will do, but later and only for our utility Rohos Mini Drive Portable.

Rohos Mini Drive is totally free for the home user and it is the best free encryption security tool that uses NIST approved encryption standard. In other words it has all a home user needs to achieve a good level of computer data privacy.

Download Rohos Mini Drive

Read more

KeyLess mode. When you need to unplug USB key for a while.

One of Rohos customers gave us an interesting tip for the program, Rohos Logon Key

Сitation:

“In our office the CPUs are under the tables, but USB cords are out on the tables for USB plugging convenience. When you need to plug in another USB device (for example your camera) the USB key should be temporarily unplugged (there is such option in Natural Login, it’s called keyless mode). It helps to prevent immediate access lock but in return it locks the machine let’s say after 3 minutes”


Now Rohos Logon Key has the same option – for the time being it’s available only through registry (USB_Key_remove_behaviour, see UserGuide).

How it works:

  • Upon USB key removal nothing happens.
  • In ## seconds (see USB_Key_remove_behaviour) the program locks computer and right away tries to unlock it with USB key.
  • If there is no key plugged in, the computer stays locked.

Review of Hardware Encryption vulnerability of Kingston and SanDisk USB flash drives

The Kingston Technology company, a leader in the production of safe USB drives, and one of the first ones that started producing USB flash drive with hardware encryption (Kingston DataTraveler Secure) announced that some of its models of USB flash drives with hardware protection feature are vulnerable. The announcement was posted on the company’s web site saying that with the help of some tools you can access this USB drive (i.e. hack it without a password). News regarding some models of Kingston being prone to cracking is very surprising because these flash drives have been certified in compliance with FIPS 140-2.

Everything started with the fact that the German company SySS published a document entitled “Companies SySS hacked USB flash drive with hardware encryption Kingston certified FIPS 104-2”. In this document they describe in details the authentication protocol between the drive and the program (the user), which they found on the basis of intercepted USB traffic + vulnerability that was discovered. And also some screenshots of the utility, which is embedded in the process of authentication program for USB drives, and as a result – we may enter any password and access will be granted.
Read more

Rohos Logon Key for Mac v.1.4.3

+ Added a few actions on USB Key removal : Lock, Log Out, Sleep, Shutdown and Nothing – the most helpful for Mac Book Air
* Fixed PIN code support for Intel based Macs
* Improved UI
* Improved Installer
* “Add USb Key” dialog doesn’t show odd Apple hardware anymore (of course iPod will be shown)

For Mac Book Air Users: This version allows to use USB flash drive only for logon/unlock moments after that you can unplug it, so you don’t need to lose a USB port. This is due to ‘Nothing’ option (see screenshot).

download v.1.4.3 beta.

Notes about PIN code:
For those who are not familiar with two-factor authentication: By setting up PIN code you protect USB Key from somebody who can use it for logon into your Mac without your permission. After you plug in USB Key – Rohos Logon will always ask user to enter PIN in order to log in or unlock your Mac. To set up PIN, just click Change PIN button, after you set up your USB Key.

  • PIN code works only for USB flash drives
  • To change it – click Change PIN – and enter new PIN and Confirmation – OK
  • If you forget PIN code – use second USB Key (created before) or Safe Boot to disable Rohos Logon

To Upgrade:

It’s better to Quit current Rohos Logon , install new version over, and then open Rohos Logon and set up USB Key again.

Notes About Uninstalling / OFFing Rohos Logon:

  • To OFF or Quit Rohos Logon USB key should be connected