KOBRA Stick guarantees data confidentiality using the following security mechanisms:

• Encryption
• Access control
• Cryptographic Key Management

Encryption

The encryption module integrated into the security case ensures complete encryption of the KOBRA Stick. Each stored byte and each written sector on the storage device is encrypted in XTS mode using two cryptographic keys according to 256-bit AES (Advanced Encryption Standard). KOBRA Stick also encrypts temporary data and areas that are often ignored by conventional encryption software.

Access control

• Access is enabled by entering a user PIN

The KOBRA Stick automatically generates a new encryption key and resets the user’s PIN to the default setting when the number of incorrect PIN entries is exceeded. Access to the data stored on the device is then no longer possible.

Cryptographic Key Management

The user can generate, change or destroy cryptographic keys at any time. This process is irreversible. Once new cryptographic keys are generated, the old cryptographic keys and thus all data stored on the data carrier are irreversibly destroyed. Therefore, all information stored on the KOBRA Stick should first be stored on another encrypted data carrier carriers if necessary. Two 256-bit encryption keys for data encryption and decryption are generated by a hardware random number generator and stored in memory. If the user’s PIN is entered correctly, they are transmitted to the KOBRA Stick encryption module for data encryption and decryption.