Encryption crackdown looms

Daily Newsletters

Sign up to ZDNet UK's daily newsletter.

NEWS
The horror of Tuesday's coordinated attacks on the commercial and military centres of America has prompted the US Congress to call for a global ban on "uncrackable" encryption products. Speaking in the US Senate on Thursday, Senator Judd Gregg proposed tighter restrictions on software that scrambles electronic data, and often hinders a government's ability to obtain valuable criminal intelligence. "This is something that we need international cooperation on and we need to have movement in order to get the information that allows us to anticipate and prevent what occurred in New York and in Washington," said Gregg, according to a report obtained by wired.com. Reports this week have suggested that the FBI believes sophisticated encryption techniques were used to coordinate the terrorist attacks on the World Trade Center and the Pentagon. Gregg is now proposing that US government officials should have access to decryption tools when the case is deemed to be a matter of national security. He said that the developers of encryption products "have as much at risk as we have at risk as a nation, and they should understand that as a matter of citizenship, they have an obligation" to produce government decryption products. In order to safeguard the privacy of innocent citizens, the interception of encrypted communications would only take place with "court oversight". The terrorist attacks on Tuesday represented one of the biggest intelligence failures in history. In a floor speech on Wednesday, Gregg admitted that the privacy of US citizens will be called into question, as governments around the world review their policies on the monitoring and tracking of individuals. "We have electronic intelligence of immense capability. It needs to be improved, especially in the area of encryption," Gregg said. "We have to, as a nation, recognise that this is, for all intents and purposes, a war, and that it is going to take soldiers, and that some of those soldiers are going to have to participate in counterintelligence activities that are covert and personal, something from which we have shied away as a society." Similar principles were used to defend the Clipper chip initiative developed by the National Security Agency (NSA) in 1994 for the National Institute of Standards and Technology (NIST). This encryption chip used the Skipjack algorithm, which could be decrypted using a process that required two separate keys. The US government proposal attempted to escrow these keys separately with the NIST and the Department of Treasury, on the basis that they could be combined under a court order to decrypt a transmission -- but the plan was unsuccessful. The UK government proposed a similar key escrow scheme in the late '90s, but this was dropped following vigorous opposition. Some of the concepts are contained in a watered-down fashion in the Regulation of Investigatory Powers Act (RIPA). This winter the government is expected to enforce the final stages of RIPA, which will grant law enforcement authorities the power to demand decryption keys from the place where data is encrypted. But security experts fear that measures such as RIPA could lead to a dangerous reliance on the gathering of electronic intelligence. "I wonder how far additional bits of technology are going to help -- there has been too much reliance on people having magic boxes, and sitting back in London or wherever, being able to voice their predictions of what might happen. Many old-fashioned intelligence agencies such as M16 are going to complain about resource cuts, and claim that they now need more people on the streets," said Peter Sommer, encryption expert based at the London School of Economics. The US encryption proposals will be strongly opposed by cyberliberty advocates. Some privacy groups are meeting at the University of Maryland in Baltimore on Friday evening to discuss ways of promoting the civil liberty argument. "We have to urge our fellow citizens not to give up their basic civil rights, especially not the right to engage in private conversations over distance and share ideas in private that others might not agree with," said Rob Carlson at the Data Vectoring Society who is organising the meeting. See the Surveillance News Section for the latest headlines. See the Net Crime News Section for the latest on hacking, fraud, viruses and related issues. Have your say instantly, and see what others have said. Click on the TalkBack button and go to the Security forum. Let the editors know what you think in the Mailroom. And read other letters.

Post your comment

In order to post a comment you need to be registered and logged in.

You can also log in with Facebook. Log in or create your ZDNet UK account below

  • Login

Will not be displayed with your comment

By signing up for this service, you indicate that you agree to our Terms and Conditions and have read and understood our Privacy Policy. Questions about membership? Find the answers in the Community FAQ

Get ZDNet UK's daily newsletter

Enter your email address to sign up

ZDNet UK Live

Frederick Wrigley

I'be been using Mint 12 since the RC came out, and I am far more happy with the Cinnamon, the Mate, and, yes (with extensions), theGnome 3...

19 minutes ago by Frederick Wrigley via Facebook on A tale of two distros: Ubuntu and Linux Mint
bdantas

Excellent article. One small correction, though--although a fresh installation of Linux Mint 12 will, indeed, provide the user with a version of...

1 hour ago by bdantas on A tale of two distros: Ubuntu and Linux Mint
Alan Ralph

In related news, the ISPs club together to get the members of the Home Affairs Select Committee (ya goofed on that part, ZDNet UK) copies of "The...

2 hours ago by Alan Ralph via Facebook on MPs urge ISPs to take down terrorist material
Alan Ralph

In related news, the ISPs club together to get the members of the Home Affairs Select Committee (ya goofed on that part, ZDNet UK) copies of "The...

2 hours ago by Alan Ralph via Facebook on MPs urge ISPs to take down terrorist material
Moley

For Gnome 2 die-hards, it is possible to add icons to the bottom panel (or top top panel, if you prefer) which provide the exact Gnome 2...

2 hours ago by Moley on A tale of two distros: Ubuntu and Linux Mint
ramwellian

Your comments would seem pretty naive and immature. Your 'solution' appears to be, "gee, let's all just give in to the hackers and give them...

3 hours ago by ramwellian on Cloud computing security: no more oxymoron?
BugStalker

"Interesting thought ... If you installed Win7 as a dual boot on a machine that previously only had Linux, and it wrecked your Linux installation,...

3 hours ago by BugStalker on Windows 7 Declares War on GRUB
whs001

This is an excellent summary of Ubuntu and Mint and the interface differences between them. Most such articles take a very partisan position for...

3 hours ago by whs001 on A tale of two distros: Ubuntu and Linux Mint
Moley

@ewallace. Not so clear. Anyone can obtain the text, for example from here http://www.ustr.gov/webfm_send/2379. I support ACTA so long as it and...

3 hours ago by Moley on ACTA: Facts, misconceptions and questions
45283

I think WinRT is fantastic. I just wish it was an option for people that didn't want to go through Microsoft's App Store with its attendant...

6 hours ago by 45283 on Why Windows 8 needs architectural hygiene for WOA
Burn-IT

Nine people? £30m? Who's back pocket is that lot going in? And IF they say it is for new buildings, what about all the ones the government has...

7 hours ago by Burn-IT on Police set to launch three £30m e-crime hubs
ewallace

Just to be clear, nobody knows what is in the text of ACTA, here is a photograph of the text of ACTA http://twitpic.com/8h9iju as submitted to the...

8 hours ago by ewallace on ACTA: Facts, misconceptions and questions
fgvrg56

Unfortunately main issue is that ASUS is refusing to accept that they make some mistake on this version of asus Transformer prime. 1 - GPS sensor...

9 hours ago by fgvrg56 on Asus Eee Pad Transformer Prime Wi-Fi & GPS problems?
Ben Woods

@Marcus A fair question. Just talked with Archos which said it was working on an announcement for next week....

10 hours ago by Ben Woods on Archos confirms G9 Ice Cream Sandwich update schedule
Marcus Karlsson

Any update on this, considering the claimed "first week of February"?

11 hours ago by Marcus Karlsson via Facebook on Archos confirms G9 Ice Cream Sandwich update schedule
apexwm

Bill Goodrich : Just as al_langevin pointed out, with Windows Server 2008 there is no Services for Macintosh anymore. It's gone, not available....

19 hours ago by apexwm on Windows Server 2008 drops the ball for Mac compatibility
txtrainguy

Replying to an old topic that I'm currently facing with my CEO (who is on a Mac). Our servers are primarily Windows Servers, office is about...

1 day ago by txtrainguy on Windows Server 2008 drops the ball for Mac compatibility
k0tcs3

Sure, that makes perfect sense. Pay wrong-doers money and thank them for breaching your security and pointing out your flaws, that would surely...

1 day ago by k0tcs3 on US indicts Romanian over NASA climate change hack
Random_Error

I think he's referring specifically to Android apps, as Apple do regulate their App Store, but Google seem to let any old crap onto the Android store!

1 day ago by Random_Error on RIM: BlackBerry will keep 'garbage' apps out of store
Paul Fezziwig

Keep the crap apps out?! How will they compete with Android and Apple's claim to fame of having so many life changing apps? I wonder if the media...

1 day ago by Paul Fezziwig via Facebook on RIM: BlackBerry will keep 'garbage' apps out of store