Cybersecurity Official Believes Encryption Can Be Backdoored Safely; Can't Think Of Single Expert Who Agrees With Him
from the broken-encryption-isn't-broken-said-no-one-ever dept
The government continues to looks for ways to route around Apple and Google’s phone encryption. The plans range from legislated backdoors to a mythical “golden key” to split-key escrow where the user holds one key and the government shares the other with device makers.
None of these are solutions. And there’s no consensus that this is a problem in search of one. Law enforcement and intelligence agencies will still find ways to get what they want from these phones, but it may involve more legwork/paperwork and the development of new tools and exploits. Without a doubt, encryption will not leave law enforcement unable to pursue investigations. Cellphones are a relatively recent development in the lifespan of law enforcement and no crime prior to the rise of cellphone usage went uninvestigated because suspects weren’t walking around with the entirety of their lives in their pockets.
But still the government continues to believe there’s some way to undermine this encryption in a way that won’t allow criminals to exploit it. This belief is based on nothing tangible. One can only imagine how many deafening silent beats passed between question and answer during White House cybersecurity policy coordinator Michael Daniel’s conversation with reporters following the recent RSA conference.
In a meeting with a handful of reporters, Daniel was asked whether or not he could name a respected technology figure who believed it possible to have strong encryption that could be circumvented by just one party’s legal authority.
“I don’t have any off the top my head,” Daniel said…
And he never will. No one who knows anything about encryption will ever say it’s possible to create a “good guys only” backdoor. Or front door. Or whatever analogy government officials choose to deploy when arguing for the “right” to access anyone’s device with minimum effort.
But that’s not the end of Daniel’s embarrassing response. He went on to disingenuously toss this back at “Silicon Valley” with a back-handed compliment insinuating that if these companies don’t solve this “problem” for the government, they’re either stupid or evil.
[Daniel] added that if any place could come up with an answer, it would be the “enormously creative” Silicon Valley.
The government believes there’s a solution out there — some magical alignment of hashes that would keep malicious hackers out and let the government in. It certainly can’t figure out this conundrum, so it’s going to keep insinuating that tech companies already know how to solve the problem but they hate children/law enforcement/America so much they won’t even consider meeting the government halfway.
But the tech companies know — as do security experts — that there’s no “halfway.” You can have encryption that works and keeps everyone locked out or you can have the government’s “encryption,” which is spelled exactly the same but has extremely leaky quote marks constantly appended, and which lets everyone in the same “door,” no matter who they are or what their intent is.