Can you explain how the security mechanism works? I have read that some secure thumb drives work in this manner:
- User enters password into PC app
- App checks password hash against hash on thumb drive to verify password
- If successful, the app sends a control code to the thumb drive to allow decryption
- Encryption is via a generic AES key, not a key derived from the user password
- The device is therefore vulnerable to being hacked via use of a USB sniffer / injection of control code
Are any of the SanDisk devices vulnerable to this? Is the encryption key seeded with the user password, and therefore unique to the device, or is a generic key used?
Thanks.