FIG. 6 illustrates an embodiment in which a host 400 with associated user interface 410 is connected via separate serial channels 430 and 440 to an encryption unit 420 of the invention, which itself is connected via separate serial channels 450 and 460 to target devices such as 470 and 480, respectively.