Re: AI's take on my cipher...

Stefan Claas <stefan@mailchuck.com> wrote:

Chris M. Thomasson wrote:
 

Think of an offline encrypt with say, my symmetric HMAC cipher thing.
You save the ciphertext to a usb drive. Oh shit, say the offline
computer is infected with a virus, and the USB is now highly suspect.
Sigh... Alice gives the USB to Bob, key/viral exchange, say a new key is
encrypted in the ciphertext... ;^). Bob just infected his computer with
the virus before decrypt even occurs.

 
Don't you have a Kanguru Defender 3000? I have one since many years,
with 3 years AV license.
 
<https://www.kanguru.com/products/kanguru-defender-3000-superspeed-usb-3-0-fips-140-2-level-3-certified-hardware-encrypted-flash-drive>

But, you now have to trust that this device is actually 'encrypting' as
it claims it is, and that it does not have a secret backdoor via a
'secondary key' or via a JTAG port that can be accessed by removing the
outer casing (or by drilling a few small holes at the correct location
into which to insert pogo pins to access that JTAG port.