Posted on Aug 24, 2016 by Rick Falkvinge

Germany, France demand golden key AND strong encryption just when you thought politicians had clued in to basic reality




In a new level of dumb, Germany and France are demanding strong encryption for all citizens at the same time as they demand this strong encryption to be breakable. They also demand messaging providers of end-to-end encryption to provide police with keys they don’t have, and for terrorists to stop using freely available strong encryption without a messaging provider. You really couldn’t sound dumber if you tried.

Just as the NSA got hacked and a golden key (unlocking all backdoored encryption) would have leaked to the world, and that same world clued in to what a monumentally stupid idea it is to have general backdoors to encryption (not to mention that it’s a contradiction in terms in the first place), Germany and France present a joint proposal that demand strong encryption and the non-existence of strong encryption at the same time.

The joint proposal called on the European Commission to […] “expand government powers to compel companies to allow access to encrypted messages” […] and present solutions that “enable effective investigation … while at the same time protecting the digital privacy of citizens by ensuring the availability of strong encryption.” … The joint proposal called for the continued general availability of encryption, but wants a law to allow law enforcement to compel messaging companies to cooperate… the German government’s plan has overall called for strong protections for end-to-end encryption in online communications.

To anybody with the slightest amount of technical understanding, this is calling for A and not-A at the same time, being completely oblivious as to not only what you’re asking for, but also that the two things you’re both demanding are completely in contradiction with each other.

In any kind of bell-curve normality, the best guess is that this is all a performance art school project and will turn out to be a joke in a day or two. As it stands now, German and French interior ministers Thomas de Maiziere and Bernard Cazeneuve appear to be doing an impersonation of Internet Explorer as it comes to the encryption debate:

 

Internet Explorer "Browsers" comicGermany and France appear to be doing an impersonation of Internet Explorer in this comic.

 

What’s really depressing about this is that we’re talking about Germany and France, who are supposed to be the two biggest powerhouses of the world’s largest economy, and they’re demanding the following, based on the observation that “terrorists” (which can mean anything today) have access to strong cryptography messaging, and with a particular focus on the terror attacks in France:

  • Expand government powers to compel messaging services, which the terrorists don’t use, to provide end-to-end cryptographic keys on demand, which the messaging services don’t have by definition, and which weren’t used in France in any case (the attackers communicated in cleartext over burner phones).
  • While negating the ability to use strong encryption, ensure the continued general possibility to use strong encryption.
  • Throw in lots of buzzwords like “Islamic State” and “Terrorism” to throw reporters off the scent from asking the obvious during the press conference.

This ties well in with my column last week about just how clueless politicians are. Privacy remains your own responsibility.

Sources: Wall Street Journal (subscription), Law360 (subscription).

About Rick Falkvinge

Rick is Head of Privacy at Private Internet Access. He is also the founder of the first Pirate Party and is a political evangelist, traveling around Europe and the world to talk and write about ideas of a sensible information policy. Additionally, he has a tech entrepreneur background and loves good whisky and fast motorcycles.


VPN Service
  • Kandi Klover

    Basically another repeat of what happened to the UK and than USA. “But like terrorism gais” *buzzword buzzword buzzwords*

  • Antimon555

    Hey Germany and France, while you’re at it, why don’t you also invent non-slippery oil and fireproof gasoline, to make motor vehicles safer too?

  • Py1hoN

    You get a golden key for one service, they move to another. You get golden keys for all the existent end-to-end encryption messaging services, they’ll use tor or i2p to communicate. You somehow break those two, they’ll jump to burners. You ban burner phones, people will be selling prepaid phones in the dark. You solve that, they can always go back to analog. Heck, they can even use the mail for it. So what now, you ban physical mail? Or maybe open and check every single package that goes through the mail system?

    See, that’s the thing about humans, they adapt.
    Whether it’s a terrorist, human trafficker, drug dealer, or a hitman, if they’re smart enough, they will do what they want to do in one way or another. Otherwise drugs wouldn’t be selling like candy in such technologically advanced societies. The whole thing is a big, endless game of whack-a-mole.

    To reduce crime, what we need more than mass surveillance programs is good education and decent living conditions for everyone. Otherwise there will always be people breaking the rules.