Court rules on encryption
Results 1 to 5 of 5

Thread: Court rules on encryption

  1. #1
    Gonzo District BOFH westin's Avatar
    Join Date
    Jan 2006
    Location
    SW MO
    Posts
    1,188

    Thumbs up Court rules on encryption

    The eleventh circuit court has ruled that defendants cannot be forced to decrypt the contents of their hard drives, as this is in violation of the 5th amendment.

    First, the decryption and production of the hard drives would require the use of the contents of Doe’s mind and could not be fairly characterized as a physical act that would be nontestimonial in nature. We conclude that the decryption and production would be tantamount to testimony by Doe of his knowledge of the existence and location of potentially incriminating files; of his possession, control, and access to the encrypted portions of the drives; and of his capability to decrypt the files.
    http://volokh.com/2012/02/23/elevent...pted-computer/

    Very cool.
    \"Those of us that had been up all night were in no mood for coffee and donuts, we wanted strong drink.\"

    -HST

  2. #2
    HYBR|D
    Guest
    I take it that this has something about that case were the DOJ is trying to force that lady to hand over her decryption key so that the FBI can examine her HDD to get evidence on her.

    And her lawyers are arguing that she doesn't have to hand it over.

  3. #3
    Senior Member
    Join Date
    Mar 2008
    Posts
    262
    That's right. The Eleventh Circuit Court of Appeal is a relatively conservative court that covers the Southeast US.

  4. #4
    Super Moderator: GMT Zone nihil's Avatar
    Join Date
    Jul 2003
    Location
    United Kingdom: Bridlington
    Posts
    17,192
    In my humble opinion it was a very courageous (and correct) decision on the part of the appeals court. It must be very difficult given the underlying nature of the case and the public hysteria that always generates.

    It does not apply in a lot of circumstances, as other case law has, and still does demonstrate. Here; if the guy had complied then he would most probably have incriminated himself, as he would have to have known the keys and locations of the files in question?

    Obviously, in the case of whole drive encryption, you either have that information or the thing is a damn useless brick? (give ya $10 for it and break it for spares)

    Here, I think the aspect that the judges took exception to was that the prosecutors were on a fishing trip that they thought they could slide through on the KP thing.

    In the cold light of day it seems to be a BIG FAIL on the part of the law enforcement agencies involved?

    Here we have a guy who is involved with KP distribution on You Tube!!!

    Whaaaatt???

    So, they track him down and trace him to an hotel (good, solid, traditional police work there +1 to all concerned).

    He has two lackluster laptops, and FIVE external HDDs totaling 4,500GB of external storage??????????????????

    Hell, the best I ever managed was 1920GB............... and that was when a mate gave me 6x320 GB PATA drives lying around from a previous server! (local hotel )

    But then things go wrong, because the KP isn't there for all to see. There are these encrypted sectors (containers) on the drive.

    The "alleged" perp decides he will go for the fifth and contempt, rather than hand it to them on a plate.

    He won because they had no reasonable evidence that there would be any evidence in the first place. In other cases this has been different, like lawyers, accountants, businessmen must keep certain records to function.............. then it's a fifth of Seagram's rather than the amendment
    I think the ruling favours the private individual, rather than professionals, or the employees of corporations or institutions.
    If you cannot do someone any good: don't do them any harm....
    As long as you did this to one of these, the least of my little ones............you did it unto Me.
    What profiteth a man if he gains the entire World at the expense of his immortal soul?

  5. #5
    Super Moderator: GMT Zone nihil's Avatar
    Join Date
    Jul 2003
    Location
    United Kingdom: Bridlington
    Posts
    17,192
    I take it that this has something about that case were the DOJ is trying to force that lady to hand over her decryption key so that the FBI can examine her HDD to get evidence on her.
    If that's the real estate mortgage loan fraud case then the FEDs have managed to crack the password. (Ramona Fricosou).

    It isn't quite the same as it was whole disk encryption using PGP Desktop. Obviously, if you forget the password to that then the laptop is a brick

    Also, the prosecutors had other evidence that the laptop did or had contained evidence which brings in the "forgone conclusion" doctrine that negates a fifth amendment plea.

    In the case this thread is about, the investigators found areas on the 7 hard drives that looked as if they might be encrypted data lockers.

    Given the nature of the encryption software that might have been used, there is no way to distinguish between random crap that might come from a secure erase, an empty data locker, and a data locker containing data............. that's how the stuff works; it disguises itself.

    So, as there was no other evidence to support the existence of relevant encrypted data, the fifth amendment came into play. In chess terms it was a pretty poor endgame on the part of the prosecution.

    This wasn't clever lawyer stuff either.............. the guy represented himself.
    Last edited by nihil; March 8th, 2012 at 03:43 PM.
    If you cannot do someone any good: don't do them any harm....
    As long as you did this to one of these, the least of my little ones............you did it unto Me.
    What profiteth a man if he gains the entire World at the expense of his immortal soul?

Similar Threads

  1. An Introduction to Cryptography, and Common Electronic Cryptosystems – Part I
    By 576869746568617 in forum Cryptography, Steganography, etc.
    Replies: 1
    Last Post: July 10th, 2006, 10:38 PM
  2. Encryption Algorithms - Basics
    By kruptos in forum The Security Tutorials Forum
    Replies: 0
    Last Post: January 29th, 2005, 12:01 AM
  3. Supreme Court won't hear Internet case -- for now
    By MrLinus in forum Miscellaneous Security Discussions
    Replies: 28
    Last Post: October 29th, 2004, 12:20 AM
  4. Date Encryption
    By CyberSpyder in forum AntiOnline's General Chit Chat
    Replies: 0
    Last Post: March 25th, 2003, 08:31 AM
  5. Basic Encryption
    By Ennis in forum The Security Tutorials Forum
    Replies: 5
    Last Post: July 5th, 2002, 09:08 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

 Security News

     Patches

       Security Trends

         How-To

           Buying Guides