Reversability Assessment on Secure USB Memories

This paper analyzes authentication and authorization protocols of commercial secure USB memories by reversing the dedicated codes for the protocols. Based on the results of the analysis, the authentication processes are easily bypassed through some modifications on the codes. Authorization processes for USB memories are involved with encryption of data and a key is used for checking authority as well as decrypting the data. Therefore, authorization can be bypassed only if the key is obtained. Through a reversing on the code for authorization, the address information for the key is achieved and used for later authorization process. According to the results, it should be considered in designing the protocols for secure USB memories to improve mutual authentication features and confidentiality of the key for authorization.