CryptoStick project

Master Project at UTwente

The Crypto Stick is a USB stick in a small form factor containing an integrated OpenPGP smart card to allow easy and high-secure encryption e.g. of e-mail or for authentication in network environments. As opposed to ordinary software solutions, private keys are always inside the Crypto Stick so that their exposure is impossible. All cryptographic operations (precisely: decryption and signature because of public key cryptography) are executed on the PIN-protected Crypto Stick. In case the Crypto Stick was stolen, got lost, or is used on a virus-contaminated computer (e.g. Trojan horse) no attacker is able to access the private keys so that all encrypted data stays secure.

The Crypto Stick is developed by the German Privacy Foundation as a non-profit open source project and ensures a very high level of security due to verifiability and an attractive price. The open interface of the used OpenPGP smart card allows optimal compatibility with various software applications (e.g. GnuPG, Mozilla Thunderbird + Enigmail, OpenSSH, Linux PAM, OpenVPN, Mozilla Firefox).

In its current version the Crypto Stick does not contain ordinary data storage. The version 2 which is currently being developed shall contain data storage.

Features:

• Three independent RSA keys (signature, encryption, authentication) with a length of up to 3072 bit

• Keys can be generated on the stick itself or already existing keys can be imported. Afterwards the private keys can never leave the CryptoStick to protect against Trojan horses, viruses, and in case of theft or loss.

• Compatible to Windows, GNU/Linux and Mac OS

• High security, due to the usage of a smart card based on a Commonv Criteria 5-high certificated one

• LED light to signalize activity

• Small and handy form factor

Further details about Crypto Stick are available at http://www.crypto-stick.org

A cooperation with the academic sector is being sought for on the following tasks:

• Embedded programming:

Implementation of an integrated encrypted storage, based on well established standards such as AES algorithm and XTS for mass storage encryption. An AES computing unit is already integrated in the processor. Also a smart card is integrated to protect the keys securely. The XTS format shall be implemented and integrated with the AES computing unit as well as the smart card and key handling.

• Programming:

Integration to external applications by new device driver (e.g. PKCS#11, OpenSC, OpenID). The interface is based on the openly specified OpenPGP Card. A device driver providing a PKCS#11 driver for the OpenPGP Card shall be developed. It is recommended to use the OpenSC framework, which is a PKCS#11 compatible open source framework.

• Web programming: Development of basic email encryption functionality

in a web interface as part of the Crypto Stick. The Crypto Stick should allow users to perform OpenPGP compatible email encryption, decryption and signing in a web interface without the requirement to execute any other software than a web browser. The underlying functionality should be developed in JavaScript and/or C.

Point of contact: s.i.nikova@utwente.nl or info@nlnet.nl

For more technical details you may contact cryptostick@privacyfoundation.de directly.