A specific SD card model is sold as a secure storage device protecting its content using a password. According to the website, the data is encrypted on the drive and knowing the password is the only way of accessing the data. This talk will present the analysis done on this device. Starting with the initial analysis, the whole process will go through reverse engineering of the client application, reimplementation of the protocol in Python and further analysis that will end with the discovery of two vulnerabilities allowing to fully bypass the protection.