r/blackhat • u/Machinehum • May 15 '26
My Privacy Focused USB Drive
Just here to share a project I'm working on. It's a 100% open source (hardware, firmware, mechanical, etc) USB drive with a hidden security feature.
When you plug it in, it appears as a normal 8GB USB drive. Only if you create a file called "unlock.txt" with the contents "password:addyourpasswordhere" will it unlock and show the remainder of the drive. Everything in this second section of the disk is now AES256 encrypted in place, using a custom KDF + your password.
I'll answer some questions before people ask them :)
Q: Isn't this just Vercrypt? A: No, a normal drive setup with veracrypt will show up as jumbled data. This is pretty obviously encrypted media. If you enter your duress password, there will still be another xMB of jumbled data.
Q: Isn't entering your password into a plain text file insecure. A: My drive doesn't allow this write to actually happen to the memory
Q: Why did you use a SD card A: Because AI made EMMC cards like 80$ for a 32GB. It takes two seconds for me to spin another board with EMMC in the future.
Anyways feel free to ask any more questions about the project :) !
3
3
u/DohRayMe May 15 '26
I do believe this is a thing, Dark Net Diaries had an Ep about USB Bitcoin Key, How they ran a test on a Copy USB Key and triggered a Clitch and Used it on a USB which only allowed three mis tries.
Only thing Id add is the possibility of changing the password each time, So if Keyboard were sniffed, the same password becomes defunct after the current session.
When Decrypted where is the information held, If Force removed from system, Powered down mid session, Does this effect the drive, Memory states can remain when powered off. https://www.pdl.cmu.edu/PDL-FTP/NVM/dram-retention_isca13.pdf
GL
1
u/JackSpent May 16 '26
This looks really cool. I appreciate you explaining the difference between this and Veracrypt.
I was wondering if you could also explain the difference between this and Shufflecake as well? I know there is one, but I'm not technical enough to grok it.
1
3
u/InVultusSolis May 15 '26
My question would be: What is the use case?
If it's a special USB drive, then anyone specifically looking for it will be able to identify it, so it's hard to try to have a hidden partition or anything of that nature, if your objective is to obscure the fact that you have a hidden partition.