Archive for September, 2007

Sep 30

0trace - traceroute on established connections

The idea behind 0trace is to launch a traceroute operation on an already established session. It is meant to bypass firewall that perform stateful inspection. This is a good idea as it allows to know what is behind the firewall. On the other hand, IDS with the TTL change might considers it as an evasion attempt.

The first version by Michal Zalewski was discuss here, You now have the Jagger’s improved version.
The example in the mailling list is quite straight forward.

Sep 27

USB key with AES embeded AES encryption

ironkeu design IronKey as released an USB key quite impressive. The file AES encryption is done onfly in hardware (see the diagram). Combine this with a strong build and you have a cool secure key. It is really something I have look forward to strore my personnal file.

Documentation said it works on Vista and XP with no software install. Thus I guess it works pretty much as a U3 USB works. I may get one and try it on my Linux.

The important point is that it use an embeded cryptochip to perform the encryption which as far as I know is unique to this device. The Cryptochips include AES-CBC and PRNG. It seems a great piece of work.

A “demo” is available here and whitepaper here