Hardware Encryption

All user data is encrypted with AES hardware encryption that meets FIPS 140–2 Level 3 requirements.

A True Random Number Generator (TRNG) on the IronKey Cryptochip generates the encryption keys used to protect your data in IronKey hardware when the drive is first activated. This ensures maximum protection via the encryption ciphers. Unlike with software-based encryption, which stores keys on the host PC hard disk and loads them into RAM memory, IronKey encryption keys are never stored or loaded onto the PC, so they can never be compromised through methods such as Cold Boot attacks or other exploits.

Unlike software-based encryption, IronKey's"always-on" hardware encryption cannot be disabled either accidentally or on purpose.

Fast and Reliable
Since the onboard Cryptochip manages the keys and performs the encryption routines, it won't slow the host PC processor and will run more securely than any software-based encryption system. IronKey also uses high-grade, high-speed flash memory.

State-of-the-Art Cryptography
IronKey follows industry best practices and uses only well–established and thoroughly tested cryptographic algorithms. All of your data on the IronKey drive is encrypted in hardware using up to 256-bit AES encryption implemented in Cypher Block Chaining (CBC) mode. CBC is a more secure implementation than the alternative Electronic Codebook (ECB) mode that some encryption products use.

Cross Platform
All IronKey devices work with Windows 2000, Windows XP SP2 or later, and Vista without administrator privileges or installing any software or drivers. IronKey drives will also work on Macintosh computers running Mac OS 10.4 or later, or Linux computers running Linux 2.6 or later. Just plug it in and go—there is no software to install.