17 ms·

The Horror of a 'Secure Golden Key'

1025 points by jashkenas 12y ago

comrade1 12y ago
Started reading. Sounded interesting. Saw picture of He-Man. Closed window.
- sarciszewski 12y ago
  That was not very relevant or meaningful.
  - comrade1 12y ago
    It's kind of hard to take the article seriously... This topic - government held keys for encryption services - is an old debate. If I remember, some countries even implemented key escrow. The He-Man picture lets you filter out the article pretty quickly.
    - sarciszewski 12y ago
      I'm pretty sure everyone who isn't grossly incompetence realizes that it's a bad idea, too. :)
    - TillE 12y ago
      I cringe at image macros and other internet memes, but I'll tolerate any marginally original silliness.
    - sbarre 12y ago
      Every heard of the concept of "a picture is worth a thousand words"? Here's my take on it and why I think you dismissed it too quickly (but of course you are free to do what you want): He-Man is a cultural theme that everyone understands and can relate you. If you watched it as a child, you know what he represents. So the author is making the point that a "magic tool that only the righteous may wield" is about as realistic as a saturday morning cartoon. He does this in one line and with one image, instead of in many more lines of text that would have sidetracked his main points.
    - sp332 12y ago
      If it's an old debate, why are we still having it? http://www.businessweek.com/news/2014-09-30/u-dot-s-dot-seeks-to-reverse-apple-android-data-locking-decision http://www.businessweek.com/news/2014-09-30/u-dot-s-dot-seek...
      - wahern 12y ago
        The debate over Key Escrow was shut down by Clinton through unilateral executive action. The political viability and constitutionality of the myriad issues mandatory escrow systems would give rise to were never tested. Furthermore, by the time key escrow was dropped the existing CALEA legislation was already a huge win for the FBI and DoJ. And given that it's 2014 and opportunistic/pervasive encryption is still more a pipe dream than a reality, the FBI and DoJ didn't care to expend more political capital pressing their case. But now that we're potentially on the cusp of more pervasive encryption, we should all be prepared for some major PR battles going forward.
sarciszewski 12y ago
The problem with a 'Secure Golden Key' is that it will, in almost every case, result in the creation of an illegal number; e.g. 09F9 1102 9D74 E35B D841 56C5 6356 88C0 And, of course, these illegal numbers can be leaked.
- danw3 12y ago
  Can you elaborate further? Specifically - what is an illegal number and why is it commonly associated with a 'Secure Golden Key'?
  - sarciszewski 12y ago
    https://lmddgtfy.net/?q=illegal+number https://lmddgtfy.net/?q=illegal+number
  - cheald 12y ago
    An illegal number is a number which is ostensibly illegal to know or distribute under legislation like the DMCA. In this case, the OP is referencing the cryptographic key used for DVDs, which the MPAA licensed to DVD player manufacturers. Since knowledge of it enabled the bypassing of encryption (otherwise known as "decrypting the content with the key"), the MPAA attempted to invoke the anti-circumvention clause of the DMCA to prevent people from publishing it. Any "Secure Golden Key" would be a number which is the encryption backdoor key. Knowledge of that number would enable you to decrypt any content encrypted with that key, and if someone who were not a government actor were to discover that number, it would doubtless be decried as illegal to know, possess, or publish.
  - johngalt 12y ago
    There was a legal battle in the early 2000s about circumventing DVD copy protections. The DVD CSS (content scramble system). The court ruling declared that the program was a 'copyright circumvention device'. It was illegal to distribute the source code. This lead to people creating illegal t-shirts with the source printed on it. http://en.wikipedia.org/wiki/DeCSS http://en.wikipedia.org/wiki/DeCSS Later the same thing happened for Blu-ray. Only it was an encryption key that was discovered and subsequently illegal to distribute under the DMCA. http://en.wikipedia.org/wiki/AACS_encryption_key_controversy http://en.wikipedia.org/wiki/AACS_encryption_key_controversy
chiph 12y ago
I'm surprised that the Clipper Chip wasn't mentioned. That was an attempt to have the government hold the (a) key for encryption hardware. It failed for obvious reasons - too big a hole, and no one trusted the NSA (correctly, as it turns out).
- mcmancini 12y ago
  Agreed. That was my first thought when law enforcement started getting press for screaming "think of the children". I'm surprised and disappointed that people have apparently forgotten recent history. This is why I greatly respect historian as a profession.
  - Zigurd 12y ago
    Another reason why Clipper Chip was a Very Bad Idea is that, when strong encryption without back doors is outlawed, only outlaws will know how to make secure crypto. It would have created a War on Forbidden Knowledge. Brrrr.
    - drvdevd 12y ago
      Also, what could the U.S. government do when this knowledge is so widespread and in so many forms at this point? Take down notices to github? Cease and desist orders to Linus Torvalds? The encryption cat is out of the bag to a certain degree. Legislation along this line would simply further harm U.S. business interest in the global marketplace, even if it were desirable.
- pdkl95 12y ago
  I remember the Clipper Chip well - it was one of the first issues to introduce me to the EFF and the (still growing) war against general purpose computing. Regarding the Clipper Chip, there is an observation that I haven't seen talked about in these discussions. There is an important difference in the NSA's tactics with their Clipper Chip proposal and their more recent activities: while technically and socially flawed, the key-escrow plan at least attempts to respect the constitution. By keeping the keys at a 3rd party, in theory the NSA was limited to what they could ask for. Automatic rubber stamped warrants may allow them access to a lot of data, but it (again, in theory) would have been tiny in comparison to their current dragnets. At first I took this as implying a change in the goals or leadership at the agency; a lot can change in a decade. But then we were introduced to BULLRUN and how it may have targeted[1] IPSEC. Given that the IPSEC working group was started in 1995, this suggests the NSA may have been trying to subvert opportunistic crypto during the Clipper Chip imbroglio. While it is speculation, this could raise the possibility that the Clipper Chip was just a distraction, while NSA's eye's were on the larger goal was the crypto standards themselves. Of course, any proof, if any, of this is buried deep in the NSA and not likely to see the light of day anytime soon. [1] http://www.mail-archive.com/cryptography@metzdowd.com/msg12325.html http://www.mail-archive.com/cryptography@metzdowd.com/msg123...
lingben 12y ago
this is a little tangential but I continue to be astonished that dropbox has been able to continue operating without client side encryption, especially after the 2011 debacle
- api 12y ago
  Users don't care about security or privacy. This has been demonstrated again and again, with Dropbox as a premier case in point. By "care" I mean "change buying habits" or "plop down money." Talk is cheap. People will say they care about security or privacy but since they do not change their spending behavior these are just words. Where people spend money is the only thing that matters in terms of steering corporate behavior or product road maps. What users care about is convenience, overall user experience (UX), and cost, in roughly that order. Enterprises and governments do care a bit more about security, but they often don't understand it and make poor buying decisions in that space. * Edit: A few tech-savvy or politically concerned users do care about security and privacy, but this is (1) a small category, and (2) generally a group that doesn't want to pay for things and thinks everything should be free. #2 is the most significant factor-- if you don't pay for things you don't exist.
  - cilantro1994 12y ago
    You are 100% spot-on. I can vouch for every one of your statement based on my decade long industry experience. Regular people are not going to give rats ass to privacy or security unless otherwise they see bodies falling from the sky. At the same time the minority who give importance to security and privacy think getting money for product is an evil thing to do and don't understand economics.
  - jamwt 12y ago
    That and the fact that they will inevitably lose their data when they mishandle or misplace their keys. In the rare case that they are the sophisticated type of user who will most likely (and even that likelihood could be debated) safely handle and retain their irrecoverable secrets, they're already solving their problem by doing client-side encryption on their own. Maybe that's what you meant by convenience/user experience. Client side encryption with a nontrivial, irrecoverable key that must be remembered and kept secret by the end user is not a very usable system for the vast majority of people.
crazygringo 12y ago
> If Apple has the key to unlock your data legally, that can also be used illegally, without Apple's cooperation. Home Depot and Target? They were recently hacked to the tune of 100 million accounts. Despite great financial and legal incentive to keep your data safe, they could not. ... your data is only as strong as the weakest programmer who has access. That's the main point here, which is excellently put. Also, the graph by the bottom is great too -- the point that our data is becoming more and more intimate is really relevant. That's something really salient, which you rarely hear mentioned these days.
- malgorithms 12y ago
  In addition to intimacy increasing over time, it's also a very continuous change. So people aren't really thinking about how it's changing. They're just doing it.
- IgorPartola 12y ago
  To me, that's not the main point. The main problem with a universal backdoor "so that the good guys could get in" is that the good guys with all their good intentions have no business pawing through your private stuff. It's not about having a good reason, or having a mandate. It's about your rights to not be subjected to warrantless searches, which is exactly what a golden backdoor would enable. In other words, even if some genius devised a backdoor that was perfectly secure (allowed access only to those who were explicitly granted that access), had it verified by an international group of geniuses 10x smarter than she is to be sure it's actually secure, and granted access to only the most trustworthy organizations, which would of course act in the most transparent way possible with a clear cut mandate and individual accountability, it's still a violation of your privacy, a violation of your rights, and in the US a violation of the constitution.
  - pyre 12y ago
    > in the US a violation of the constitution The fact that there is a backdoor is not a violation of the Constitution. If it's only used with legal warrants, then it's well within the Constitution.
malgorithms 12y ago
Author of the post here. (Thanks, Jeremy.) There are many details I avoided in the essay that people will get sidetracked on. Such as whether Apple is actually doing it right or not. This is discussed and speculated on elsewhere. And right now I'm far more worried about a world in which they're legally prevented from trying. When the FBI starts talking about our kids getting kidnapped, I think bills start getting drafted. There are tangents I think HN would've cared about, but which would've been a distraction. For related controversy, Keybase - which I work on - lets users symmetrically encrypt their asymmetric keys, and store that data on our servers. We also let you do crypto in JS. Many hate this! Many love it! But I want to be legally allowed to write this kind of software and release it without a backdoor. It's hard enough when we all fight about implementation details and security vs. convenience. It'll be a real crap show when we know for certain that security has lost. I'll go program video games or something. Or just play them.
- panarky 12y ago
  The Powers that Be are conducting a coordinated disinformation campaign to keep and expand their backdoor access by scaring the bejesus out of the public. Apple will become the phone of choice for the pedophile. What happens when they blame strong cryptography for the next gut-wrenching tragedy involving innocent kids and a bombing / school shooting / kidnapping / pedophile? Your arguments will be swept away by a tsunami of grief, hatred and blind patriotism. Is it possible to make an equally emotional argument in favor of the freedom to be secure? Secure information deserves the same prestige and protection as the Four Freedoms. https://en.wikipedia.org/wiki/Four_Freedoms https://en.wikipedia.org/wiki/Four_Freedoms
  - PythonicAlpha 12y ago
    That is likely the tragedy of freedom: There are no emotional arguments for it. It seems to me, politicians and other people have long sought for the most emotional arguments to wipe away the wings of freedom -- and thus making the victims of pedophiles, bombing and kidnapping victims again! (BTW: In Germany, pedophiles where also used as argument for internet censorship. Organisations of those victims protested against these attempts, because they clearly saw, that this legislation did not help (and where never intended to) those victims or help to prevent anything.)
lotsofcows 12y ago
The good guys? Who are the good guys? The integrity of which government departments do you trust?
shkkmo 12y ago
I'm not sure "Threat #4. It Protects You From the future" is quite accurate. It protects your form the near future where the time taken to break the encryption is long. However, Moore's law and the discovery of flaws in present encryption methods mean that eventually, even items for which the only key has beed destroyed will not be private.
- wyager 12y ago
  > Moore's law There are physical limitations on Moore's law. If you were to design a mathematically good/perfect n-bit cryptosystem that took 2^n tries to break, you can make some very strong guarantees. For example, even a perfectly efficient computer (1 electron flip per attempt) would (on average) take more energy than the sun will ever emit to break an ideal 256-bit cryptosystem. > discovery of flaws in present encryption methods This is the kicker. However, I'm hopeful. We have some really old cryptosystems that are still going 20-30 years later. As analytical techniques advance, I bet we'll find some even more rigorous constructions.
  - Filligree 12y ago
    You'd better double that bit count; there's a generalised algorithm which lets you break symmetric encryption of N bits in 2^(N/2) time. This probably still means that 256 bits is good enough. Of course, then there's RSA to worry about..
    - wahern 12y ago
      Are you thinking about the Birthday Paradox? Because a) that usually applies to hashes, and b) it applies when you're trying to find collisions by between two variable strings, not one fixed and one variable. Otherwise, you may want to get on the phone with everybody using AES-128, et al and let them know. 2^64 would be rather trivial to crack these days.
      - wyager 12y ago
        He's thinking of Grover's algorithm. And yet, if it could be implemented in a fast way, it would bring AES-128 into the range of trivial breakability.
higherpurpose 12y ago
The US government is a bunch of hypocrites. They pretend to care about "cybersecurity", but: 1) don't allow you to actually secure yourself properly, because then you'd also be secure against them, and that seems to be a big NO-NO 2) with each new "cyber-threat" they seem to want to remove even more of our rights and liberties So forgive me if the next time the US government yells CYBER PEARL HARBOR PEDOPHILES TERRORISTS - I'm not in a rush to believe them.
rqebmm 12y ago
Based on the thesis "perhaps Apple and Google could invent a kind of secure golden key” so that the good guys could get to it if necessary." The bottom line is: Sadly, there's no way to tell who the "good guys" are.
- TillE 12y ago
  Or simply: nobody can be trusted not to abuse power. That's why we have transparency, checks and balances, etc. I can believe that a lot of people have good intentions. But that doesn't mean their actions are always right.
- jerf 12y ago
  That's a weak argument because there's a lot of people who aren't willing to consider the possibility that an assumed-good guy might actually be a bad guy, either now or at a date in the future, and may even mock you for suggesting it. The HN gestalt itself has varied opinions on this matter depending on the topic. Much better is just to observe that any such key can't be kept from the bad guys, whoever they may be, and backdoored encryption over time tends to be no encryption at all. This is simply the truth. For all we know Snowden carried out some encryption keys, and if he didn't, for all we know Snowden II will. Making the former argument puts you in a position of trying to argue uphill against what may be some very solid presuppositions about the goodness of the good guys; the second argument is undeniable, and very simple. (Of course some will managed to deny it anyhow; there's no such thing as a perfectly effective argument. But it's much stronger.)
  - rqebmm 12y ago
    I don't think we disagree. My point is very much in line with "any such key can't be kept from the bad guys, whoever they may be". Even if you give it to only the "good guys" and somehow ensure that nobody else could get it, there's no way to know the "good guys" will always be "good". It all depends on context. If the NSA is stopping people from harming innocents, they (rightfully) think they're the good guys. If they are secretly spying on said innocents without their consent, people (rightfully) think they're the bad guys.
- 12y ago
RKoutnik 12y ago
The rhetoric that a 'Golden Key' will only be used by the 'good guys' is like thinking we can create a 'Golden Gun' that will only shoot the bad guys. The two issues I see are: 1) The bad guys might still be able to get the key (as the article discusses) 2) We don't know who the 'good guys' are. It's very comforting to think that there's some mysterious superhero who will only fight for good but this ignores the large issue: no one can really agree on what "good" is.
- JoshTriplett 12y ago
  2.5) We can't agree on what "good" is because there is no unified 'good' side here; there are a giant pile of adversaries. Everyone will say they're the good ones and everyone else is bad. As one obvious example, the intelligence services in one country won't necessarily trust those of another, and vice versa. The only sane implementation is to use the definition of 'adversary' provided by the person whose data you're protecting. Anything else would be broken. This is the same key escrow battle we had when cryptography was first propagated: "Oh no, it actually works, and we can't trivially break it, it'll be the end of the world!". Only this time, the battle is "Oh no, it actually works for people who aren't technically savvy, it'll be the end of the world!". The answer is the same now as it was then: no, go away, we're building solutions that work and you're asking us to make them broken.
- malgorithms 12y ago
  This is great. Still, if we start arguing that maybe your government is the bad guy, certainly we won't convince the government. Also we won't convince the people who blindly trust the government. Therefore, it might actually be most productive to avoid point number 2, as valid as it is, and take as premise that the government & Apple are both currently good guys. And then still convince a secure golden key is a bad idea. With this in mind, the closest I dared to get was the discussion of the future. Governments do change. Whoever has access to your golden key might be a bad guy tomorrow, or invaded by a bad guy. Btw, I even took out a whole section about questionably lawful warrants before publishing. For this reason.
- PythonicAlpha 12y ago
  As much I see today, there are no good guys at all in the world. There are only some guys, who try to be good, but so many fail.
Someone1234 12y ago
This Golden Key idea is one of those classic "I'm just an idea man, I don't have to figure out the nitty gritty details!" claims. Everything is easy if you can leave figuring out the intractable problems to someone else. When you actually sit and think about this for a few minutes the problems quickly become apparent. The closest real world system to this is DRM on games consoles (e.g. XBox 360). They use secret "Golden Keys" to protect authoring but still need to allow users access to that same information. However the way DRM worked in that context was a combination of hardware (e.g. roll-back proof) and tieing the whole thing into a mandatory update system (i.e. no games without updates). That DRM actually got cracked several times, but because updates were required they could just ignore it and move on. The problem with the Golden Key suggestion here is that once your data is compromise it is game over forever. There's no do-overs as there is with DRM systems.
- smtddr 12y ago
  >>The problem with the Golden Key suggestion here is that once your data is compromise it is game over forever. There's no do-overs as there is with DRM systems. For the game consoles there aren't really feasible do-overs either if the keys at ring 0(the earliest security event) are revealed. As in, the only path to recovery is to physically replace every game console out there. http://www.ps3hax.net/2012/10/marcan-fail0verflow-about-lv0/ http://www.ps3hax.net/2012/10/marcan-fail0verflow-about-lv0/ >>The effect of this is essentially the same that the metldr key release had: all existing and future firmwares can be decrypted, except Sony no longer has the lv0 trick up their sleeve. What this means is that there is no way for Sony to wrap future firmware to hide it from anyone, because old PS3s must be able to use all future firmware (assuming Sony doesn’t just decide to brick them all…), and those old PS3s now have no remaining seeds of security that aren’t known.
- drvdevd 12y ago
  > This Golden Key idea is one of those classic "I'm just an idea man, I don't have to figure out the nitty gritty details!" claims. Most definitely. And even the way it was proposed at the end of the original WaPo editorial was very nonchalant: > However, with all their wizardry, perhaps Apple and Google could invent a kind of secure golden key they would retain and use only when a court has approved a search warrant. Let's all be sure to remind the "non-technical" public that there is no wizardry involved here. It's logic, mathematics, and science and some things are possible and some things just are not. Encryption in this sense is very black and white: either your data can be decrypted by a 3rd party or it can't. And if it can be decrypted by one 3rd party, you must assume it can be decrypted by any 3rd party.
roywiggins 12y ago
Isn't there a 'Secure Golden Key' at the base of DNSSEC? I guess the damage would be somewhat less if that key was exposed, but still.
- valarauca1 12y ago
  Golden Key security underlines DNSSEC and TLS. Fundamentally you are trusting 1 or very few agencies that they in fact have your security and best interests in mind. This is normally when somebody starts talking using GPG to replace TLS and DNSSEC systems. But this is normally somebody who doesn't realize how graph theory or at least path finding works, so they are ignored.
  - wahern 12y ago
    It's not the same as a Golden Key because you're not handing over your private keys to somebody else, nor are you trusting them to store private information. There's no substantive analogy to be made at all. Also, there are quite decent alternatives to DNSSEC. In particular, DNSCurve: http://dnscurve.org/ http://dnscurve.org/ PKI is admittedly a mess at the moment. News at 11. But that's irrelevant to arguments regarding Golden Keys, aka backdoors to your own, private information.
- sounds 12y ago
  Too true. Now that you're thinking along these lines, look at some of the alternative name-resolution systems and, hopefully, find one that you want to contribute to. We need at least one viable alternative to DNS. Competition.
atmosx 12y ago
Call me crazy but the first time I saw the article I thought I was reading a NSA press release. I'm very sceptical on the source of the this article, did the author (and the newspaper) came with the idea alone or he driven by third parties.
ChrisAntaki 12y ago
This threat tends to be underplayed by our intelligence community. > Threat #2... Even if you trust the U.S. government to act in your best interest (say, by foiling terrorists), do you trust the Russian government? Do you trust the Chinese? If a door is open to one organization, it is open to all.
- tkinom 12y ago
  China's potential iphone market likely be bigger than US. Chinese gov can easily say: "Give us the golden key, or your phone is not getting into the China Cell market."
x1798DE 12y ago
"OK, just spitballing here, but how about instead of leaving a back door open, we just don't lock one of the windows? Is that a good compromise for everyone?"
dmix 12y ago
This old picture (from SOPA I believe?) sums up Washington Posts editorial board https://pbs.twimg.com/media/By8I4QGCcAELNPV.jpg https://pbs.twimg.com/media/By8I4QGCcAELNPV.jpg
revelation 12y ago
The Washington Post is stuck reliving the crypto wars. Just close the tab, we can always let them back in when they have catched up to the 21th century. Just a shame they managed to trick Orin Kerr into that mess they call journalism.
Animats 12y ago
What we need is forced disclosure of interception by the Government. I propose the following: - Anything the Government intercepts must be disclosed to the parties intercepted after some period of time. - After three years, longer than the length of most criminal investigations, the Government must disclose intercepts, except that the Government may choose to withhold information for no more than 25% of intercepts. This allows for long-running intelligence operations and criminal investigations, while forcing disclosure of excess interception. - Every three years thereafter, the Government must disclose all but 25% of the withheld disclosures. So, over time, more intercepts are disclosed, until all are. - Records of all interceptions, listing the parties involved and all other pertinent data but not the content of the interception, made within the US or of persons or entities within the US, must be reported within 7 days to the office of the Attorney General of the United States, the Administrative Office of the U.S. Courts, and the Librarian of Congress, there to be held permanently and securely. This puts a copy of the data in the hands of each branch of government.
- spacehome 12y ago
  > the Government may choose to withhold information for no more than 25% of intercepts. Be careful of unintentional incentivization. The govn't could just intercept 4 times more than it really wants.
- tnorthcutt 12y ago
  What? No. We need to prevent interception in the first place.
eli 12y ago
I know this may be a minority opinion, but I'm personally much less likely to share articles with my colleagues when they have cartoon images in them.
praptak 12y ago
I would perhaps consider a system where N independent keepers of keys need to agree to a privacy override. Balance of power and stuff. It is possible from the crypto point of view but it doesn't really matter because... ...first we'd have to find at least one worthy keeper and it's a social problem, not a technical one.
jordanpg 12y ago
Schneier 5 days ago: "Ah, but that's the thing: You can't build a "back door" that only the good guys can walk through. Encryption protects against cybercriminals, industrial competitors, the Chinese secret police and the FBI. You're either vulnerable to eavesdropping by any of them, or you're secure from eavesdropping from all of them. Back-door access built for the good guys is routinely used by the bad guys. In 2005, some unknown group surreptitiously used the lawful-intercept capabilities built into the Greek cell phone system. The same thing happened in Italy in 2006. In 2010, Chinese hackers subverted an intercept system Google had put into Gmail to comply with U.S. government surveillance requests. Back doors in our cell phone system are currently being exploited by the FBI and unknown others." http://www.cnn.com/2014/10/03/opinion/schneier-apple-encryption-hysteria/ http://www.cnn.com/2014/10/03/opinion/schneier-apple-encrypt...
- higherpurpose 12y ago
  There is also this research on the IETF standard for "lawful intercept" in routers: Exploiting Lawful Intercept to Wiretap the Internet https://www.blackhat.com/presentations/bh-dc-10/Cross_Tom/BlackHat-DC-2010-Cross-Attacking-LawfulI-Intercept-wp.pdf https://www.blackhat.com/presentations/bh-dc-10/Cross_Tom/Bl...
- csandreasen 12y ago
  There are plenty of things you can do. Your passwords (or whatever authentication method you choose to use) are a "back door" to get access to your device/accounts. What do you do to keep them secure? Your password can also be used be used by the bad guys - what do you do to reduce the chance of that happening and mitigate damage if it does happen? Now instead of thinking how you protect your own information, come up with ways concerning how you would protect your neighbor's, neighborhood's, city's, etc. and work your way up. Implementing the "back door" might be a difficult problem, but stating a priori that it's an intractable problem is just lazy thinking.
  - toyg 12y ago
    Let's not try to doublespeak our way out of this: a "backdoor" that is only in your mind and heavily hashed everywhere else is not a backdoor -- it's a front door of which only one person (you) holds the key. A backdoor is a backdoor is a backdoor: an entrance on which you have no visibility nor control. And this is exactly what a "golden key" would be, regardless of how it's implemented.
dpeck 12y ago
Tom Cross (security researcher, activist, etc) has been talking a lot about potential abuses of lawful intercept for a while, if you like this article and looking for something deeper his 2010 Blackhat paper is worth a read https://www.blackhat.com/presentations/bh-dc-10/Cross_Tom/BlackHat-DC-2010-Cross-Attacking-LawfulI-Intercept-wp.pdf https://www.blackhat.com/presentations/bh-dc-10/Cross_Tom/Bl...
abruzzi 12y ago
Its interesting that there are a lot of arguments against backdoors in the comments here that sound similar to NRA/gun rights arguments. Whatever I (or you) may think about guns: I don't think that is a bad thing. It may be a hint in how arguments for keeping strong crypto strong could be successfully made. Yes the NRA may go over the top and many think they're evil, but aside from cultural arguments, most of their arguments boil down to self protection, and they've been very successful making those arguments part of the US culture.
jimbobimbo 12y ago
Good observation on "golden key" == "backdoor". That reminded me George Carlin's "Euphemisms": https://www.youtube.com/watch?v=vuEQixrBKCc https://www.youtube.com/watch?v=vuEQixrBKCc (May have strong language)
- sanderjd 12y ago
  I don't think it was a euphemism at all! I think that the author of the article had no sense that "secure golden key" is just an implementation detail of "back door". Which is the sort of misunderstanding of "how stuff actually works" that becomes dangerous when influencing and defining policy. There is a good debate to be had here, but it really shouldn't contain the word "wizardry" anywhere.
  - jimbobimbo 12y ago
    It might be an honest mistake today, but tomorrow it could be picked up as a word that would let some legislation go trough without alerting general public. I think, it's important for the security community to make sure that the "golden key" won't become an euphemism in the future. This article is a great start.
drivingmenuts 12y ago
Do the guys who suggest these things like "Secure Golden Keys" actually talk to their own IT staff before coming up with something that stupid? Seems like that could have been curtailed by a five-minute trip to the computer room and asking the guy with the longest beard.
- pluma 12y ago
  Everybody knows IT people are just lazy and will always tell you it's impossible. Everything anybody needs to know about IT people can be learned from watching Star Trek.
  - throwwit 12y ago
    The problem is that a technical solution is probably an order of magnitude more complex than a bit torrent or bit coin system; and will take a bit of cross discipline imagination.
garimagupta95 12y ago
I don't understand why this is being posted here.
placebo 12y ago
The idea of a secure golden key would be wonderful if you could always trust the keepers of that key to do the right thing. But you can't. The same applies to the idea of "you have nothing to fear if you have nothing to hide", which incorrectly assumes that what you perceive today as nothing to hide will always be perceived the same way by others that can view your communications. The ironic thing is that eventually, those that the golden key is aimed at today will probably be the least hurt by it. The bad guys will take precautions and not trust the security of public services (they'll be using their own secure channels) while the good guys will continue to loose their privacy and liberty.
amosgewirtz 12y ago
The Post's proposal is so obviously ridiculous it's almost difficult to discuss fruitfully. The fact is, it just doesn't really matter who has access to certain individual's security; as long as somebody other than the owner has access, than privacy is violated. There's no such thing as half measures when it comes to security and there's no such thing as a semi-permeable security "membrane", so to speak. A story: The Belgian census bureau in 1930-31-32-33 conducted a nationwide survey, noting down, among other things, people's religion. Although this was done innocently for records' sake, when the Nazis invaded the country, they had access to a perfect registry of Belgian Jews. The takeaway is that the "good guys" won't always be in possession of sensitive information, no matter how good they are. Safety comes in people's ability to manage their own information, not in their ability to manage others'.
AnimalMuppet 12y ago
Here's another argument against it: Market share. Scenario 1: Apple creates a secure system without a backdoor. Everybody uses it. Scenario 2: Apple creates a "secure" system with a golden key that lets US law enforcement in. Nobody with a clue outside the US uses it. Several European governments ban it. Apple (and US) market share declines around the world.
towski 12y ago
"Good guys". Apple. Google? Whuy? Why do adults have the moral understanding of a 10 year old.
SixSigma 12y ago
The Ultimate Godwin reason. The French people, presumably, trusted the French govt. in 1936 when they filled in their census data. Big Data is not a modern phenomena. It was invented in the 1930s by IBM and the Hollerith machines. The success of tabulating 40+ million Prussians was repeated across Europe. The French census data was bravely protected by prevaricating French administrative staff who had realised the consequences but delay turned into eventual capitulation. http://www.ibmandtheholocaust.com/ http://www.ibmandtheholocaust.com/ You cannot trust your future government, it could be anybody, with any agenda.
- cheepin 12y ago
  I think this is a big point that gets overlooked. The question isn't really whether or not the current powers are trustworthy with your data. It's really whether every possible steward of your data is trustworthy over an arbitrarily long time-span.
  - r00fus 12y ago
    Not just governments, but corporations as well.
    - Ar-Curunir 12y ago
      At some point the difference ceases to matter.
  - jeangenie 12y ago
    I think that's a really interesting point that isn't adequately considered. It's also surprising that there isn't more liability and therefore risk associated with systems that make mass breaches (Target, Home Depot, J.P. Morgan, etc.) possible but I suppose no one's particularly concerned about consumers.
  - SixSigma 12y ago
    At some point the data could be considered more valuable than the original business activity and some organization makes moves to gain legitimate control of it.
haberman 12y ago
A "golden key" only makes sense to me if it is exchanged for transparency of when it is used. Imagine a hardware device that can vend session keys to any device, but will not do so unless it can push a notification to a public server that publishes the identity of both the accessor (who must authenticate themselves) and the identity being backdoored. If the argument is that law enforcement will only use this when going through proper channels, let this be enforced by forced transparency. The hardware device would be designed to never let the underlying key leave the device. So for the key to fall into the wrong hands, the hardware device would have to physically fall into the wrong hands. The hardware would therefore need to be housed in a secure location. This is what I personally would require before I could ever support a golden key.
- rqebmm 12y ago
  >A "golden key" only makes sense to me if it is exchanged for transparency of when it is used. This is a very interesting point. Sadly it's just as impossible to guarantee transparency when using the key as it is to guarantee the security of the key :(
hadoukenio 12y ago
"A well regulated militia being necessary to the security of a free state, the right of the people to keep and bear arms shall not be infringed." - Second Amendment to the United States Constitution As US law classifies cryptography as a munition, isn't it every US citizens right to use encryption?
- aric 12y ago
  ARMs.
  - hadoukenio 12y ago
    Arms is short for armament. Armament = Weapon. The Department of Justice classified cryptography as a munition. Munition = Weapon. In law, it's always about the technicalities, down to the definition of words. Prove me wrong.
    - toyg 12y ago
      I'm not disagreeing with you, just pointing out that if crypto is ammunition, then the actual weapon is the computer. So this could be read as the amendment forbidding the government from taking away your computers. It would be a fabulous interpretation, although I'm somehow skeptical that we'll ever find a court endorsing it.
      - hadoukenio 12y ago
        I think you're getting armament, munition and ammunition confused. The US Justice Department classifies cryptography as a "munition" (aka a weapon), not "ammunition" (used by a weapon).
        toyg 12y ago
        "Munition" is originally a word for "fortification", and was then expanded to mean "weapon" or "ammunition" interchangeably. It's a generic term, so you can interpret it both ways.
InclinedPlane 12y ago
It's interesting how often the lessons of history need to be relearned. It doesn't matter that we can trust the government of today (to the degree we can, which isn't much, in my opinion), it's never wise to give governments ultimate power. Because it means that if the government then becomes untrustoworthy the results are much remedy the situation. Moreover, our little "free" bubble is not the entire world, the governments that most of the people of the world live under are not merely untrustworthy, in many cases they are exploitive or oppressive. Not the sorts of organizations you'd want to give the ability to snoop into everyone's business. Many folks are blessed with the fortune of living lives without turmoil or great consequence, and for those folks it may seem perfectly normal to allow the state into their affairs. But we should not force the state to be in everyone's affairs, we should not chose to live in a police state out of some fool notion that there will be less crime or less terrorism there. That's not how it ever works out.
golemotron 12y ago
Has anyone ever tried to pass a law like this for the physical world? Something like: all safes and houses must have locks with a universal key that only the police know.
j_baker 12y ago
> How to resolve this? A police “back door” for all smartphones is undesirable — a back door can and will be exploited by bad guys, too. However, with all their wizardry, perhaps Apple and Google could invent a kind of secure golden key they would retain and use only when a court has approved a search warrant. I don't get it. What's the difference between a "backdoor" and a "golden key" other than that one sounds less threatening than the other? It's seriously clear that WaPo simply has no idea what they're even talking about. Did they not have a Software Engineer on hand they could run this past?
tom_buzz 12y ago
This is just the key escrow debate of the 90s all over again.
- natch 12y ago
  It may be the same debate, but that doesn't mean the war is over, if that's what you're saying.
peterkelly 12y ago
The other worrying thing is the American-centric view of these issues. "Foreign governments" seems to implicitly imply "governments outside the US". As one of the 6.7 billion people on the planet that is not a US citizen or resident, to me, the US is a foreign government. For American companies to gain trust of markets outside the US, they have to take this into account. Apple and Google know this very well. Want to sell to China? Germany? Brazil? If the US government wants to enforce a backdoor on US products, that's going to do tremendous damage to their companies ability to compete in the global market.
- toyg 12y ago
  > If the US government wants to enforce a backdoor on US products, that's going to do tremendous damage to their companies ability to compete in the global market. Nah, they'll just go "f*ck this" and share the backdoor with other governments (who will be extremely grateful). And then all these golden keys will magically show up on Iranian and Pakistani servers, Kim Jong-un will parade them, etc etc.
mangeletti 12y ago
Seriously, epic. I hope this stays at the top for 3 days.
deleted 12y ago
[deleted]
mangeletti 12y ago
Keybase absolutely MUST implement a "we haven't received any FISO requests, etc." type of page on their website, one which can be taken down in the event of an illegal intrusion by the government via this mechanism, before it's too late. One cannot add a page stating that they have had such a request, so the former is the only option.
sopooneo 12y ago
I think there are two sides to this, but for the most part neither side will admit the negative aspects of their stance. Any "golden key" backdoor that is implemented, no matter how emphatic the promises, will be abused. On the other hand, having truly inaccessible data, no matter how much it enables the our valid right to privacy, will also make communication between criminals, including terrorists, easier.
- avn2109 12y ago
  Ben Franklin (allegedly) said, "Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety." The old guy is seeming more and more prescient nowadays. Pretty clear that BF wouldn't have supported backdoors (especially not with the grim Orwellian doublespeak name "Golden Key.")
  - krapp 12y ago
    Although, it is entirely possible that what Ben Franklin actually meant was not what many believe[0]... But who knows? I think it's a bit silly to presume what the Founding Fathers would have thought about modern concepts like cryptographic backdoors, when they[1] would have probably been far more appalled by all of the black people and women running around unattended than at the existence of a standing army or laws governing interstate commerce or whatever. [0]http://www.lawfareblog.com/2011/07/what-ben-franklin-really-said/ http://www.lawfareblog.com/2011/07/what-ben-franklin-really-... [1]generally speaking... i'm not implying all of the Founding Fathers supported slavery, obviously, just that their political and social priorities would not necessarily be what we might expect.
charl3s0say 12y ago
This WAPO Piece was not written for and not meant to be taken seriously by those that know cryptography or know even the basics of the internet. The op-ed is quite unsophisticated (especially from a technical point of view). It is an opinion and technical solution that is as doomed for failure as it is comically simplistic. This op-ed Is really meant to be a public service message to the "law makers" (pols, old white guys etc) who still read the WAPO publication, using words that appear to be reasonable and balanced in an astroturf-consensus way, while at the same time, worded to make the Googles/Apples and even smaller players sweat a little. The scare message is simplistic. Do what we say. You don't refuse us. We make the rules. If this is their message to 2 of the largest company's in the planets history, you can imagine the contempt that they hold the little players who just use their products. Google, Apple, and everyone else just needs to stand firm on this. Its that simple. And indeed The bigger choice is simple, will the Securocrat's ruin the 21st century's largest companies in the name of the "Security state" or will they learn to just deal with it? As a CEO of one of these Corps, or just a humble user of their product, to find "consensus" and "compromise" on this issue, is to create a western world where we are all chinese/russian/subversive by our very being. And who in the west wants to live in that world?
blueking 12y ago
What a terrible idea. Yes key escrow is a NSA agenda they have been trying to sneak into our stack for quite some time. As if the NSA hadn't done enough damage to the cloud industry, now they are trying this shit again. American IT products are going to be totally unmarketable outside of the US. The trust is gone. The day any corporation adopts this stance is the day I ditch them. I will literally throw my iPad in the trash. Apple and Google will entirely lose the leverage their ecosystems provide if they try this.
boie0025 12y ago
I keep having flashbacks to 1994... Clipper Chip saga.. anyhow, here's a good read.. looks the the debate hasn't changed too much. http://www.nytimes.com/1994/06/12/magazine/battle-of-the-clipper-chip.html?src=pm&pagewanted=1 http://www.nytimes.com/1994/06/12/magazine/battle-of-the-cli...
swagasaurus-rex 12y ago
> Your personal pics, videos... will all be leaked, a kind of secure golden shower The humor writes itself
- brianmcc 12y ago
  I pretty much sprayed my monitor with coffee when I read that in the article. Tremendous :-)
visarga 12y ago
The "Secure Golden Key" is as secure for the internet as the "Wonderful Beating Stick" is "wonderful" for a kid. Just because we put "wonderful" in the name of a beating stick does not make it so.
crististm 12y ago
the clipper chip is back on the radar
7952 12y ago
I understand the rightful distaste for backdoors. However, it occurs to me that any encryption system that could get widespread use would need some kind of mechanism to recover data in the event of loss of password/hardware/authentification device etc. The more valuable data is the more important backups are. I think that the general public would be reluctant to use any complete encryption product that could lead to loss of personal data such as email in the event of common human error. We need ways to recover data, and if those methods exist they could always be used by law enforcment. Encryption has to exist within the world as it is (with comprimises), not how you may want it to be. A secure encrypted backup recovery standard may actually make users safer, because what we have now is so much more vulnerable.
- jleight 12y ago
  I think the real point to take out of this is how important it is to have secure backups of your encryption key. Making sure that the encrypted data is backed up is common sense. Backing up the encryption key is just as important. If I were to lose my encryption key, I would absolutely expect to lose my data. That's how encryption works. That's how encryption should work. If I can get my data back without the encryption key, someone else can too.
franciscop 12y ago
Yet we have to recognize that a single, strong password that only you know is not good enough. Given the processing power evolution, a password that would be cited to take 100 years to break by a strong computer, in 10 years it would take 3 and in 20 years it would take 35 days. I hope by then we're thinking about which secure system to migrate to.
nathan_long 12y ago
> perhaps Apple and Google could invent a kind of secure golden key they would retain and use only when a court has approved a search warrant Even if the Washington Post has no idea how cryptography works, this is incredibly naive politically. "A court", you say? From which country? Google and Apple do business worldwide. Can China's courts access my data? Iran's? If Apple employees have the key, they decide. And if they decide, any country with enough monetary leverage can get the key. "You can't do business in China unless you give us access." (Not to mention the head-in-the-sand implication that the US government would only get data using due process.) The only way this can work is if the tech firm cannot access the data.
bhhaskin 12y ago
Who decides who the "good guys" are?

1025 points by jashkenas 12y ago

comrade1 12y ago

Started reading. Sounded interesting. Saw picture of He-Man. Closed window.

sarciszewski 12y ago
That was not very relevant or meaningful.
- comrade1 12y ago
  It's kind of hard to take the article seriously... This topic - government held keys for encryption services - is an old debate. If I remember, some countries even implemented key escrow. The He-Man picture lets you filter out the article pretty quickly.
  - sarciszewski 12y ago
    I'm pretty sure everyone who isn't grossly incompetence realizes that it's a bad idea, too. :)
  - TillE 12y ago
    I cringe at image macros and other internet memes, but I'll tolerate any marginally original silliness.
  - sbarre 12y ago
    Every heard of the concept of "a picture is worth a thousand words"? Here's my take on it and why I think you dismissed it too quickly (but of course you are free to do what you want): He-Man is a cultural theme that everyone understands and can relate you. If you watched it as a child, you know what he represents. So the author is making the point that a "magic tool that only the righteous may wield" is about as realistic as a saturday morning cartoon. He does this in one line and with one image, instead of in many more lines of text that would have sidetracked his main points.
  - sp332 12y ago
    If it's an old debate, why are we still having it? http://www.businessweek.com/news/2014-09-30/u-dot-s-dot-seeks-to-reverse-apple-android-data-locking-decision http://www.businessweek.com/news/2014-09-30/u-dot-s-dot-seek...
    - wahern 12y ago
      The debate over Key Escrow was shut down by Clinton through unilateral executive action. The political viability and constitutionality of the myriad issues mandatory escrow systems would give rise to were never tested. Furthermore, by the time key escrow was dropped the existing CALEA legislation was already a huge win for the FBI and DoJ. And given that it's 2014 and opportunistic/pervasive encryption is still more a pipe dream than a reality, the FBI and DoJ didn't care to expend more political capital pressing their case. But now that we're potentially on the cusp of more pervasive encryption, we should all be prepared for some major PR battles going forward.

sarciszewski 12y ago

The problem with a 'Secure Golden Key' is that it will, in almost every case, result in the creation of an illegal number; e.g. 09F9 1102 9D74 E35B D841 56C5 6356 88C0 And, of course, these illegal numbers can be leaked.

danw3 12y ago
Can you elaborate further? Specifically - what is an illegal number and why is it commonly associated with a 'Secure Golden Key'?
- sarciszewski 12y ago
  https://lmddgtfy.net/?q=illegal+number https://lmddgtfy.net/?q=illegal+number
- cheald 12y ago
  An illegal number is a number which is ostensibly illegal to know or distribute under legislation like the DMCA. In this case, the OP is referencing the cryptographic key used for DVDs, which the MPAA licensed to DVD player manufacturers. Since knowledge of it enabled the bypassing of encryption (otherwise known as "decrypting the content with the key"), the MPAA attempted to invoke the anti-circumvention clause of the DMCA to prevent people from publishing it. Any "Secure Golden Key" would be a number which is the encryption backdoor key. Knowledge of that number would enable you to decrypt any content encrypted with that key, and if someone who were not a government actor were to discover that number, it would doubtless be decried as illegal to know, possess, or publish.
- johngalt 12y ago
  There was a legal battle in the early 2000s about circumventing DVD copy protections. The DVD CSS (content scramble system). The court ruling declared that the program was a 'copyright circumvention device'. It was illegal to distribute the source code. This lead to people creating illegal t-shirts with the source printed on it. http://en.wikipedia.org/wiki/DeCSS http://en.wikipedia.org/wiki/DeCSS Later the same thing happened for Blu-ray. Only it was an encryption key that was discovered and subsequently illegal to distribute under the DMCA. http://en.wikipedia.org/wiki/AACS_encryption_key_controversy http://en.wikipedia.org/wiki/AACS_encryption_key_controversy

chiph 12y ago

I'm surprised that the Clipper Chip wasn't mentioned. That was an attempt to have the government hold the (a) key for encryption hardware. It failed for obvious reasons - too big a hole, and no one trusted the NSA (correctly, as it turns out).

mcmancini 12y ago
Agreed. That was my first thought when law enforcement started getting press for screaming "think of the children". I'm surprised and disappointed that people have apparently forgotten recent history. This is why I greatly respect historian as a profession.
- Zigurd 12y ago
  Another reason why Clipper Chip was a Very Bad Idea is that, when strong encryption without back doors is outlawed, only outlaws will know how to make secure crypto. It would have created a War on Forbidden Knowledge. Brrrr.
  - drvdevd 12y ago
    Also, what could the U.S. government do when this knowledge is so widespread and in so many forms at this point? Take down notices to github? Cease and desist orders to Linus Torvalds? The encryption cat is out of the bag to a certain degree. Legislation along this line would simply further harm U.S. business interest in the global marketplace, even if it were desirable.
pdkl95 12y ago
I remember the Clipper Chip well - it was one of the first issues to introduce me to the EFF and the (still growing) war against general purpose computing. Regarding the Clipper Chip, there is an observation that I haven't seen talked about in these discussions. There is an important difference in the NSA's tactics with their Clipper Chip proposal and their more recent activities: while technically and socially flawed, the key-escrow plan at least attempts to respect the constitution. By keeping the keys at a 3rd party, in theory the NSA was limited to what they could ask for. Automatic rubber stamped warrants may allow them access to a lot of data, but it (again, in theory) would have been tiny in comparison to their current dragnets. At first I took this as implying a change in the goals or leadership at the agency; a lot can change in a decade. But then we were introduced to BULLRUN and how it may have targeted[1] IPSEC. Given that the IPSEC working group was started in 1995, this suggests the NSA may have been trying to subvert opportunistic crypto during the Clipper Chip imbroglio. While it is speculation, this could raise the possibility that the Clipper Chip was just a distraction, while NSA's eye's were on the larger goal was the crypto standards themselves. Of course, any proof, if any, of this is buried deep in the NSA and not likely to see the light of day anytime soon. [1] http://www.mail-archive.com/cryptography@metzdowd.com/msg12325.html http://www.mail-archive.com/cryptography@metzdowd.com/msg123...

lingben 12y ago

this is a little tangential but I continue to be astonished that dropbox has been able to continue operating without client side encryption, especially after the 2011 debacle

api 12y ago
Users don't care about security or privacy. This has been demonstrated again and again, with Dropbox as a premier case in point. By "care" I mean "change buying habits" or "plop down money." Talk is cheap. People will say they care about security or privacy but since they do not change their spending behavior these are just words. Where people spend money is the only thing that matters in terms of steering corporate behavior or product road maps. What users care about is convenience, overall user experience (UX), and cost, in roughly that order. Enterprises and governments do care a bit more about security, but they often don't understand it and make poor buying decisions in that space. * Edit: A few tech-savvy or politically concerned users do care about security and privacy, but this is (1) a small category, and (2) generally a group that doesn't want to pay for things and thinks everything should be free. #2 is the most significant factor-- if you don't pay for things you don't exist.
- cilantro1994 12y ago
  You are 100% spot-on. I can vouch for every one of your statement based on my decade long industry experience. Regular people are not going to give rats ass to privacy or security unless otherwise they see bodies falling from the sky. At the same time the minority who give importance to security and privacy think getting money for product is an evil thing to do and don't understand economics.
- jamwt 12y ago
  That and the fact that they will inevitably lose their data when they mishandle or misplace their keys. In the rare case that they are the sophisticated type of user who will most likely (and even that likelihood could be debated) safely handle and retain their irrecoverable secrets, they're already solving their problem by doing client-side encryption on their own. Maybe that's what you meant by convenience/user experience. Client side encryption with a nontrivial, irrecoverable key that must be remembered and kept secret by the end user is not a very usable system for the vast majority of people.

crazygringo 12y ago

> If Apple has the key to unlock your data legally, that can also be used illegally, without Apple's cooperation. Home Depot and Target? They were recently hacked to the tune of 100 million accounts. Despite great financial and legal incentive to keep your data safe, they could not. ... your data is only as strong as the weakest programmer who has access. That's the main point here, which is excellently put. Also, the graph by the bottom is great too -- the point that our data is becoming more and more intimate is really relevant. That's something really salient, which you rarely hear mentioned these days.

malgorithms 12y ago
In addition to intimacy increasing over time, it's also a very continuous change. So people aren't really thinking about how it's changing. They're just doing it.
IgorPartola 12y ago
To me, that's not the main point. The main problem with a universal backdoor "so that the good guys could get in" is that the good guys with all their good intentions have no business pawing through your private stuff. It's not about having a good reason, or having a mandate. It's about your rights to not be subjected to warrantless searches, which is exactly what a golden backdoor would enable. In other words, even if some genius devised a backdoor that was perfectly secure (allowed access only to those who were explicitly granted that access), had it verified by an international group of geniuses 10x smarter than she is to be sure it's actually secure, and granted access to only the most trustworthy organizations, which would of course act in the most transparent way possible with a clear cut mandate and individual accountability, it's still a violation of your privacy, a violation of your rights, and in the US a violation of the constitution.
- pyre 12y ago
  > in the US a violation of the constitution The fact that there is a backdoor is not a violation of the Constitution. If it's only used with legal warrants, then it's well within the Constitution.

malgorithms 12y ago

Author of the post here. (Thanks, Jeremy.) There are many details I avoided in the essay that people will get sidetracked on. Such as whether Apple is actually doing it right or not. This is discussed and speculated on elsewhere. And right now I'm far more worried about a world in which they're legally prevented from trying. When the FBI starts talking about our kids getting kidnapped, I think bills start getting drafted. There are tangents I think HN would've cared about, but which would've been a distraction. For related controversy, Keybase - which I work on - lets users symmetrically encrypt their asymmetric keys, and store that data on our servers. We also let you do crypto in JS. Many hate this! Many love it! But I want to be legally allowed to write this kind of software and release it without a backdoor. It's hard enough when we all fight about implementation details and security vs. convenience. It'll be a real crap show when we know for certain that security has lost. I'll go program video games or something. Or just play them.

panarky 12y ago
The Powers that Be are conducting a coordinated disinformation campaign to keep and expand their backdoor access by scaring the bejesus out of the public. Apple will become the phone of choice for the pedophile. What happens when they blame strong cryptography for the next gut-wrenching tragedy involving innocent kids and a bombing / school shooting / kidnapping / pedophile? Your arguments will be swept away by a tsunami of grief, hatred and blind patriotism. Is it possible to make an equally emotional argument in favor of the freedom to be secure? Secure information deserves the same prestige and protection as the Four Freedoms. https://en.wikipedia.org/wiki/Four_Freedoms https://en.wikipedia.org/wiki/Four_Freedoms
- PythonicAlpha 12y ago
  That is likely the tragedy of freedom: There are no emotional arguments for it. It seems to me, politicians and other people have long sought for the most emotional arguments to wipe away the wings of freedom -- and thus making the victims of pedophiles, bombing and kidnapping victims again! (BTW: In Germany, pedophiles where also used as argument for internet censorship. Organisations of those victims protested against these attempts, because they clearly saw, that this legislation did not help (and where never intended to) those victims or help to prevent anything.)

lotsofcows 12y ago

The good guys? Who are the good guys? The integrity of which government departments do you trust?

shkkmo 12y ago

I'm not sure "Threat #4. It Protects You From the future" is quite accurate. It protects your form the near future where the time taken to break the encryption is long. However, Moore's law and the discovery of flaws in present encryption methods mean that eventually, even items for which the only key has beed destroyed will not be private.

wyager 12y ago
> Moore's law There are physical limitations on Moore's law. If you were to design a mathematically good/perfect n-bit cryptosystem that took 2^n tries to break, you can make some very strong guarantees. For example, even a perfectly efficient computer (1 electron flip per attempt) would (on average) take more energy than the sun will ever emit to break an ideal 256-bit cryptosystem. > discovery of flaws in present encryption methods This is the kicker. However, I'm hopeful. We have some really old cryptosystems that are still going 20-30 years later. As analytical techniques advance, I bet we'll find some even more rigorous constructions.
- Filligree 12y ago
  You'd better double that bit count; there's a generalised algorithm which lets you break symmetric encryption of N bits in 2^(N/2) time. This probably still means that 256 bits is good enough. Of course, then there's RSA to worry about..
  - wahern 12y ago
    Are you thinking about the Birthday Paradox? Because a) that usually applies to hashes, and b) it applies when you're trying to find collisions by between two variable strings, not one fixed and one variable. Otherwise, you may want to get on the phone with everybody using AES-128, et al and let them know. 2^64 would be rather trivial to crack these days.
    - wyager 12y ago
      He's thinking of Grover's algorithm. And yet, if it could be implemented in a fast way, it would bring AES-128 into the range of trivial breakability.

higherpurpose 12y ago

The US government is a bunch of hypocrites. They pretend to care about "cybersecurity", but: 1) don't allow you to actually secure yourself properly, because then you'd also be secure against them, and that seems to be a big NO-NO 2) with each new "cyber-threat" they seem to want to remove even more of our rights and liberties So forgive me if the next time the US government yells CYBER PEARL HARBOR PEDOPHILES TERRORISTS - I'm not in a rush to believe them.

rqebmm 12y ago

Based on the thesis "perhaps Apple and Google could invent a kind of secure golden key” so that the good guys could get to it if necessary." The bottom line is: Sadly, there's no way to tell who the "good guys" are.

TillE 12y ago
Or simply: nobody can be trusted not to abuse power. That's why we have transparency, checks and balances, etc. I can believe that a lot of people have good intentions. But that doesn't mean their actions are always right.
jerf 12y ago
That's a weak argument because there's a lot of people who aren't willing to consider the possibility that an assumed-good guy might actually be a bad guy, either now or at a date in the future, and may even mock you for suggesting it. The HN gestalt itself has varied opinions on this matter depending on the topic. Much better is just to observe that any such key can't be kept from the bad guys, whoever they may be, and backdoored encryption over time tends to be no encryption at all. This is simply the truth. For all we know Snowden carried out some encryption keys, and if he didn't, for all we know Snowden II will. Making the former argument puts you in a position of trying to argue uphill against what may be some very solid presuppositions about the goodness of the good guys; the second argument is undeniable, and very simple. (Of course some will managed to deny it anyhow; there's no such thing as a perfectly effective argument. But it's much stronger.)
- rqebmm 12y ago
  I don't think we disagree. My point is very much in line with "any such key can't be kept from the bad guys, whoever they may be". Even if you give it to only the "good guys" and somehow ensure that nobody else could get it, there's no way to know the "good guys" will always be "good". It all depends on context. If the NSA is stopping people from harming innocents, they (rightfully) think they're the good guys. If they are secretly spying on said innocents without their consent, people (rightfully) think they're the bad guys.
12y ago

RKoutnik 12y ago

The rhetoric that a 'Golden Key' will only be used by the 'good guys' is like thinking we can create a 'Golden Gun' that will only shoot the bad guys. The two issues I see are: 1) The bad guys might still be able to get the key (as the article discusses) 2) We don't know who the 'good guys' are. It's very comforting to think that there's some mysterious superhero who will only fight for good but this ignores the large issue: no one can really agree on what "good" is.

JoshTriplett 12y ago
2.5) We can't agree on what "good" is because there is no unified 'good' side here; there are a giant pile of adversaries. Everyone will say they're the good ones and everyone else is bad. As one obvious example, the intelligence services in one country won't necessarily trust those of another, and vice versa. The only sane implementation is to use the definition of 'adversary' provided by the person whose data you're protecting. Anything else would be broken. This is the same key escrow battle we had when cryptography was first propagated: "Oh no, it actually works, and we can't trivially break it, it'll be the end of the world!". Only this time, the battle is "Oh no, it actually works for people who aren't technically savvy, it'll be the end of the world!". The answer is the same now as it was then: no, go away, we're building solutions that work and you're asking us to make them broken.
malgorithms 12y ago
This is great. Still, if we start arguing that maybe your government is the bad guy, certainly we won't convince the government. Also we won't convince the people who blindly trust the government. Therefore, it might actually be most productive to avoid point number 2, as valid as it is, and take as premise that the government & Apple are both currently good guys. And then still convince a secure golden key is a bad idea. With this in mind, the closest I dared to get was the discussion of the future. Governments do change. Whoever has access to your golden key might be a bad guy tomorrow, or invaded by a bad guy. Btw, I even took out a whole section about questionably lawful warrants before publishing. For this reason.
PythonicAlpha 12y ago
As much I see today, there are no good guys at all in the world. There are only some guys, who try to be good, but so many fail.

Someone1234 12y ago

This Golden Key idea is one of those classic "I'm just an idea man, I don't have to figure out the nitty gritty details!" claims. Everything is easy if you can leave figuring out the intractable problems to someone else. When you actually sit and think about this for a few minutes the problems quickly become apparent. The closest real world system to this is DRM on games consoles (e.g. XBox 360). They use secret "Golden Keys" to protect authoring but still need to allow users access to that same information. However the way DRM worked in that context was a combination of hardware (e.g. roll-back proof) and tieing the whole thing into a mandatory update system (i.e. no games without updates). That DRM actually got cracked several times, but because updates were required they could just ignore it and move on. The problem with the Golden Key suggestion here is that once your data is compromise it is game over forever. There's no do-overs as there is with DRM systems.

smtddr 12y ago
>>The problem with the Golden Key suggestion here is that once your data is compromise it is game over forever. There's no do-overs as there is with DRM systems. For the game consoles there aren't really feasible do-overs either if the keys at ring 0(the earliest security event) are revealed. As in, the only path to recovery is to physically replace every game console out there. http://www.ps3hax.net/2012/10/marcan-fail0verflow-about-lv0/ http://www.ps3hax.net/2012/10/marcan-fail0verflow-about-lv0/ >>The effect of this is essentially the same that the metldr key release had: all existing and future firmwares can be decrypted, except Sony no longer has the lv0 trick up their sleeve. What this means is that there is no way for Sony to wrap future firmware to hide it from anyone, because old PS3s must be able to use all future firmware (assuming Sony doesn’t just decide to brick them all…), and those old PS3s now have no remaining seeds of security that aren’t known.
drvdevd 12y ago
> This Golden Key idea is one of those classic "I'm just an idea man, I don't have to figure out the nitty gritty details!" claims. Most definitely. And even the way it was proposed at the end of the original WaPo editorial was very nonchalant: > However, with all their wizardry, perhaps Apple and Google could invent a kind of secure golden key they would retain and use only when a court has approved a search warrant. Let's all be sure to remind the "non-technical" public that there is no wizardry involved here. It's logic, mathematics, and science and some things are possible and some things just are not. Encryption in this sense is very black and white: either your data can be decrypted by a 3rd party or it can't. And if it can be decrypted by one 3rd party, you must assume it can be decrypted by any 3rd party.

roywiggins 12y ago

Isn't there a 'Secure Golden Key' at the base of DNSSEC? I guess the damage would be somewhat less if that key was exposed, but still.

valarauca1 12y ago
Golden Key security underlines DNSSEC and TLS. Fundamentally you are trusting 1 or very few agencies that they in fact have your security and best interests in mind. This is normally when somebody starts talking using GPG to replace TLS and DNSSEC systems. But this is normally somebody who doesn't realize how graph theory or at least path finding works, so they are ignored.
- wahern 12y ago
  It's not the same as a Golden Key because you're not handing over your private keys to somebody else, nor are you trusting them to store private information. There's no substantive analogy to be made at all. Also, there are quite decent alternatives to DNSSEC. In particular, DNSCurve: http://dnscurve.org/ http://dnscurve.org/ PKI is admittedly a mess at the moment. News at 11. But that's irrelevant to arguments regarding Golden Keys, aka backdoors to your own, private information.
sounds 12y ago
Too true. Now that you're thinking along these lines, look at some of the alternative name-resolution systems and, hopefully, find one that you want to contribute to. We need at least one viable alternative to DNS. Competition.

atmosx 12y ago

Call me crazy but the first time I saw the article I thought I was reading a NSA press release. I'm very sceptical on the source of the this article, did the author (and the newspaper) came with the idea alone or he driven by third parties.

ChrisAntaki 12y ago

This threat tends to be underplayed by our intelligence community. > Threat #2... Even if you trust the U.S. government to act in your best interest (say, by foiling terrorists), do you trust the Russian government? Do you trust the Chinese? If a door is open to one organization, it is open to all.

tkinom 12y ago
China's potential iphone market likely be bigger than US. Chinese gov can easily say: "Give us the golden key, or your phone is not getting into the China Cell market."

x1798DE 12y ago

"OK, just spitballing here, but how about instead of leaving a back door open, we just don't lock one of the windows? Is that a good compromise for everyone?"

dmix 12y ago

This old picture (from SOPA I believe?) sums up Washington Posts editorial board https://pbs.twimg.com/media/By8I4QGCcAELNPV.jpg https://pbs.twimg.com/media/By8I4QGCcAELNPV.jpg

revelation 12y ago

The Washington Post is stuck reliving the crypto wars. Just close the tab, we can always let them back in when they have catched up to the 21th century. Just a shame they managed to trick Orin Kerr into that mess they call journalism.

Animats 12y ago

What we need is forced disclosure of interception by the Government. I propose the following: - Anything the Government intercepts must be disclosed to the parties intercepted after some period of time. - After three years, longer than the length of most criminal investigations, the Government must disclose intercepts, except that the Government may choose to withhold information for no more than 25% of intercepts. This allows for long-running intelligence operations and criminal investigations, while forcing disclosure of excess interception. - Every three years thereafter, the Government must disclose all but 25% of the withheld disclosures. So, over time, more intercepts are disclosed, until all are. - Records of all interceptions, listing the parties involved and all other pertinent data but not the content of the interception, made within the US or of persons or entities within the US, must be reported within 7 days to the office of the Attorney General of the United States, the Administrative Office of the U.S. Courts, and the Librarian of Congress, there to be held permanently and securely. This puts a copy of the data in the hands of each branch of government.

spacehome 12y ago
> the Government may choose to withhold information for no more than 25% of intercepts. Be careful of unintentional incentivization. The govn't could just intercept 4 times more than it really wants.
tnorthcutt 12y ago
What? No. We need to prevent interception in the first place.

eli 12y ago

I know this may be a minority opinion, but I'm personally much less likely to share articles with my colleagues when they have cartoon images in them.

praptak 12y ago

I would perhaps consider a system where N independent keepers of keys need to agree to a privacy override. Balance of power and stuff. It is possible from the crypto point of view but it doesn't really matter because... ...first we'd have to find at least one worthy keeper and it's a social problem, not a technical one.

jordanpg 12y ago

Schneier 5 days ago: "Ah, but that's the thing: You can't build a "back door" that only the good guys can walk through. Encryption protects against cybercriminals, industrial competitors, the Chinese secret police and the FBI. You're either vulnerable to eavesdropping by any of them, or you're secure from eavesdropping from all of them. Back-door access built for the good guys is routinely used by the bad guys. In 2005, some unknown group surreptitiously used the lawful-intercept capabilities built into the Greek cell phone system. The same thing happened in Italy in 2006. In 2010, Chinese hackers subverted an intercept system Google had put into Gmail to comply with U.S. government surveillance requests. Back doors in our cell phone system are currently being exploited by the FBI and unknown others." http://www.cnn.com/2014/10/03/opinion/schneier-apple-encryption-hysteria/ http://www.cnn.com/2014/10/03/opinion/schneier-apple-encrypt...

higherpurpose 12y ago
There is also this research on the IETF standard for "lawful intercept" in routers: Exploiting Lawful Intercept to Wiretap the Internet https://www.blackhat.com/presentations/bh-dc-10/Cross_Tom/BlackHat-DC-2010-Cross-Attacking-LawfulI-Intercept-wp.pdf https://www.blackhat.com/presentations/bh-dc-10/Cross_Tom/Bl...
csandreasen 12y ago
There are plenty of things you can do. Your passwords (or whatever authentication method you choose to use) are a "back door" to get access to your device/accounts. What do you do to keep them secure? Your password can also be used be used by the bad guys - what do you do to reduce the chance of that happening and mitigate damage if it does happen? Now instead of thinking how you protect your own information, come up with ways concerning how you would protect your neighbor's, neighborhood's, city's, etc. and work your way up. Implementing the "back door" might be a difficult problem, but stating a priori that it's an intractable problem is just lazy thinking.
- toyg 12y ago
  Let's not try to doublespeak our way out of this: a "backdoor" that is only in your mind and heavily hashed everywhere else is not a backdoor -- it's a front door of which only one person (you) holds the key. A backdoor is a backdoor is a backdoor: an entrance on which you have no visibility nor control. And this is exactly what a "golden key" would be, regardless of how it's implemented.

dpeck 12y ago

Tom Cross (security researcher, activist, etc) has been talking a lot about potential abuses of lawful intercept for a while, if you like this article and looking for something deeper his 2010 Blackhat paper is worth a read https://www.blackhat.com/presentations/bh-dc-10/Cross_Tom/BlackHat-DC-2010-Cross-Attacking-LawfulI-Intercept-wp.pdf https://www.blackhat.com/presentations/bh-dc-10/Cross_Tom/Bl...

abruzzi 12y ago

Its interesting that there are a lot of arguments against backdoors in the comments here that sound similar to NRA/gun rights arguments. Whatever I (or you) may think about guns: I don't think that is a bad thing. It may be a hint in how arguments for keeping strong crypto strong could be successfully made. Yes the NRA may go over the top and many think they're evil, but aside from cultural arguments, most of their arguments boil down to self protection, and they've been very successful making those arguments part of the US culture.

jimbobimbo 12y ago

Good observation on "golden key" == "backdoor". That reminded me George Carlin's "Euphemisms": https://www.youtube.com/watch?v=vuEQixrBKCc https://www.youtube.com/watch?v=vuEQixrBKCc (May have strong language)

sanderjd 12y ago
I don't think it was a euphemism at all! I think that the author of the article had no sense that "secure golden key" is just an implementation detail of "back door". Which is the sort of misunderstanding of "how stuff actually works" that becomes dangerous when influencing and defining policy. There is a good debate to be had here, but it really shouldn't contain the word "wizardry" anywhere.
- jimbobimbo 12y ago
  It might be an honest mistake today, but tomorrow it could be picked up as a word that would let some legislation go trough without alerting general public. I think, it's important for the security community to make sure that the "golden key" won't become an euphemism in the future. This article is a great start.

drivingmenuts 12y ago

Do the guys who suggest these things like "Secure Golden Keys" actually talk to their own IT staff before coming up with something that stupid? Seems like that could have been curtailed by a five-minute trip to the computer room and asking the guy with the longest beard.

pluma 12y ago
Everybody knows IT people are just lazy and will always tell you it's impossible. Everything anybody needs to know about IT people can be learned from watching Star Trek.
- throwwit 12y ago
  The problem is that a technical solution is probably an order of magnitude more complex than a bit torrent or bit coin system; and will take a bit of cross discipline imagination.

garimagupta95 12y ago

I don't understand why this is being posted here.

placebo 12y ago

The idea of a secure golden key would be wonderful if you could always trust the keepers of that key to do the right thing. But you can't. The same applies to the idea of "you have nothing to fear if you have nothing to hide", which incorrectly assumes that what you perceive today as nothing to hide will always be perceived the same way by others that can view your communications. The ironic thing is that eventually, those that the golden key is aimed at today will probably be the least hurt by it. The bad guys will take precautions and not trust the security of public services (they'll be using their own secure channels) while the good guys will continue to loose their privacy and liberty.

amosgewirtz 12y ago

The Post's proposal is so obviously ridiculous it's almost difficult to discuss fruitfully. The fact is, it just doesn't really matter who has access to certain individual's security; as long as somebody other than the owner has access, than privacy is violated. There's no such thing as half measures when it comes to security and there's no such thing as a semi-permeable security "membrane", so to speak. A story: The Belgian census bureau in 1930-31-32-33 conducted a nationwide survey, noting down, among other things, people's religion. Although this was done innocently for records' sake, when the Nazis invaded the country, they had access to a perfect registry of Belgian Jews. The takeaway is that the "good guys" won't always be in possession of sensitive information, no matter how good they are. Safety comes in people's ability to manage their own information, not in their ability to manage others'.

AnimalMuppet 12y ago

Here's another argument against it: Market share. Scenario 1: Apple creates a secure system without a backdoor. Everybody uses it. Scenario 2: Apple creates a "secure" system with a golden key that lets US law enforcement in. Nobody with a clue outside the US uses it. Several European governments ban it. Apple (and US) market share declines around the world.

towski 12y ago

"Good guys". Apple. Google? Whuy? Why do adults have the moral understanding of a 10 year old.

SixSigma 12y ago

The Ultimate Godwin reason. The French people, presumably, trusted the French govt. in 1936 when they filled in their census data. Big Data is not a modern phenomena. It was invented in the 1930s by IBM and the Hollerith machines. The success of tabulating 40+ million Prussians was repeated across Europe. The French census data was bravely protected by prevaricating French administrative staff who had realised the consequences but delay turned into eventual capitulation. http://www.ibmandtheholocaust.com/ http://www.ibmandtheholocaust.com/ You cannot trust your future government, it could be anybody, with any agenda.

cheepin 12y ago
I think this is a big point that gets overlooked. The question isn't really whether or not the current powers are trustworthy with your data. It's really whether every possible steward of your data is trustworthy over an arbitrarily long time-span.
- r00fus 12y ago
  Not just governments, but corporations as well.
  - Ar-Curunir 12y ago
    At some point the difference ceases to matter.
- jeangenie 12y ago
  I think that's a really interesting point that isn't adequately considered. It's also surprising that there isn't more liability and therefore risk associated with systems that make mass breaches (Target, Home Depot, J.P. Morgan, etc.) possible but I suppose no one's particularly concerned about consumers.
- SixSigma 12y ago
  At some point the data could be considered more valuable than the original business activity and some organization makes moves to gain legitimate control of it.

haberman 12y ago

A "golden key" only makes sense to me if it is exchanged for transparency of when it is used. Imagine a hardware device that can vend session keys to any device, but will not do so unless it can push a notification to a public server that publishes the identity of both the accessor (who must authenticate themselves) and the identity being backdoored. If the argument is that law enforcement will only use this when going through proper channels, let this be enforced by forced transparency. The hardware device would be designed to never let the underlying key leave the device. So for the key to fall into the wrong hands, the hardware device would have to physically fall into the wrong hands. The hardware would therefore need to be housed in a secure location. This is what I personally would require before I could ever support a golden key.

rqebmm 12y ago
>A "golden key" only makes sense to me if it is exchanged for transparency of when it is used. This is a very interesting point. Sadly it's just as impossible to guarantee transparency when using the key as it is to guarantee the security of the key :(

hadoukenio 12y ago

"A well regulated militia being necessary to the security of a free state, the right of the people to keep and bear arms shall not be infringed." - Second Amendment to the United States Constitution As US law classifies cryptography as a munition, isn't it every US citizens right to use encryption?

aric 12y ago
ARMs.
- hadoukenio 12y ago
  Arms is short for armament. Armament = Weapon. The Department of Justice classified cryptography as a munition. Munition = Weapon. In law, it's always about the technicalities, down to the definition of words. Prove me wrong.
  - toyg 12y ago
    I'm not disagreeing with you, just pointing out that if crypto is ammunition, then the actual weapon is the computer. So this could be read as the amendment forbidding the government from taking away your computers. It would be a fabulous interpretation, although I'm somehow skeptical that we'll ever find a court endorsing it.
    - hadoukenio 12y ago
      I think you're getting armament, munition and ammunition confused. The US Justice Department classifies cryptography as a "munition" (aka a weapon), not "ammunition" (used by a weapon).
      - toyg 12y ago
        "Munition" is originally a word for "fortification", and was then expanded to mean "weapon" or "ammunition" interchangeably. It's a generic term, so you can interpret it both ways.

InclinedPlane 12y ago

It's interesting how often the lessons of history need to be relearned. It doesn't matter that we can trust the government of today (to the degree we can, which isn't much, in my opinion), it's never wise to give governments ultimate power. Because it means that if the government then becomes untrustoworthy the results are much remedy the situation. Moreover, our little "free" bubble is not the entire world, the governments that most of the people of the world live under are not merely untrustworthy, in many cases they are exploitive or oppressive. Not the sorts of organizations you'd want to give the ability to snoop into everyone's business. Many folks are blessed with the fortune of living lives without turmoil or great consequence, and for those folks it may seem perfectly normal to allow the state into their affairs. But we should not force the state to be in everyone's affairs, we should not chose to live in a police state out of some fool notion that there will be less crime or less terrorism there. That's not how it ever works out.

golemotron 12y ago

Has anyone ever tried to pass a law like this for the physical world? Something like: all safes and houses must have locks with a universal key that only the police know.

j_baker 12y ago

> How to resolve this? A police “back door” for all smartphones is undesirable — a back door can and will be exploited by bad guys, too. However, with all their wizardry, perhaps Apple and Google could invent a kind of secure golden key they would retain and use only when a court has approved a search warrant. I don't get it. What's the difference between a "backdoor" and a "golden key" other than that one sounds less threatening than the other? It's seriously clear that WaPo simply has no idea what they're even talking about. Did they not have a Software Engineer on hand they could run this past?

tom_buzz 12y ago

This is just the key escrow debate of the 90s all over again.

natch 12y ago
It may be the same debate, but that doesn't mean the war is over, if that's what you're saying.

peterkelly 12y ago

The other worrying thing is the American-centric view of these issues. "Foreign governments" seems to implicitly imply "governments outside the US". As one of the 6.7 billion people on the planet that is not a US citizen or resident, to me, the US is a foreign government. For American companies to gain trust of markets outside the US, they have to take this into account. Apple and Google know this very well. Want to sell to China? Germany? Brazil? If the US government wants to enforce a backdoor on US products, that's going to do tremendous damage to their companies ability to compete in the global market.

toyg 12y ago
> If the US government wants to enforce a backdoor on US products, that's going to do tremendous damage to their companies ability to compete in the global market. Nah, they'll just go "f*ck this" and share the backdoor with other governments (who will be extremely grateful). And then all these golden keys will magically show up on Iranian and Pakistani servers, Kim Jong-un will parade them, etc etc.

mangeletti 12y ago

Seriously, epic. I hope this stays at the top for 3 days.

deleted 12y ago

[deleted]

mangeletti 12y ago

Keybase absolutely MUST implement a "we haven't received any FISO requests, etc." type of page on their website, one which can be taken down in the event of an illegal intrusion by the government via this mechanism, before it's too late. One cannot add a page stating that they have had such a request, so the former is the only option.

sopooneo 12y ago

I think there are two sides to this, but for the most part neither side will admit the negative aspects of their stance. Any "golden key" backdoor that is implemented, no matter how emphatic the promises, will be abused. On the other hand, having truly inaccessible data, no matter how much it enables the our valid right to privacy, will also make communication between criminals, including terrorists, easier.

avn2109 12y ago
Ben Franklin (allegedly) said, "Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety." The old guy is seeming more and more prescient nowadays. Pretty clear that BF wouldn't have supported backdoors (especially not with the grim Orwellian doublespeak name "Golden Key.")
- krapp 12y ago
  Although, it is entirely possible that what Ben Franklin actually meant was not what many believe[0]... But who knows? I think it's a bit silly to presume what the Founding Fathers would have thought about modern concepts like cryptographic backdoors, when they[1] would have probably been far more appalled by all of the black people and women running around unattended than at the existence of a standing army or laws governing interstate commerce or whatever. [0]http://www.lawfareblog.com/2011/07/what-ben-franklin-really-said/ http://www.lawfareblog.com/2011/07/what-ben-franklin-really-... [1]generally speaking... i'm not implying all of the Founding Fathers supported slavery, obviously, just that their political and social priorities would not necessarily be what we might expect.

charl3s0say 12y ago

This WAPO Piece was not written for and not meant to be taken seriously by those that know cryptography or know even the basics of the internet. The op-ed is quite unsophisticated (especially from a technical point of view). It is an opinion and technical solution that is as doomed for failure as it is comically simplistic. This op-ed Is really meant to be a public service message to the "law makers" (pols, old white guys etc) who still read the WAPO publication, using words that appear to be reasonable and balanced in an astroturf-consensus way, while at the same time, worded to make the Googles/Apples and even smaller players sweat a little. The scare message is simplistic. Do what we say. You don't refuse us. We make the rules. If this is their message to 2 of the largest company's in the planets history, you can imagine the contempt that they hold the little players who just use their products. Google, Apple, and everyone else just needs to stand firm on this. Its that simple. And indeed The bigger choice is simple, will the Securocrat's ruin the 21st century's largest companies in the name of the "Security state" or will they learn to just deal with it? As a CEO of one of these Corps, or just a humble user of their product, to find "consensus" and "compromise" on this issue, is to create a western world where we are all chinese/russian/subversive by our very being. And who in the west wants to live in that world?

blueking 12y ago

What a terrible idea. Yes key escrow is a NSA agenda they have been trying to sneak into our stack for quite some time. As if the NSA hadn't done enough damage to the cloud industry, now they are trying this shit again. American IT products are going to be totally unmarketable outside of the US. The trust is gone. The day any corporation adopts this stance is the day I ditch them. I will literally throw my iPad in the trash. Apple and Google will entirely lose the leverage their ecosystems provide if they try this.

boie0025 12y ago

I keep having flashbacks to 1994... Clipper Chip saga.. anyhow, here's a good read.. looks the the debate hasn't changed too much. http://www.nytimes.com/1994/06/12/magazine/battle-of-the-clipper-chip.html?src=pm&pagewanted=1 http://www.nytimes.com/1994/06/12/magazine/battle-of-the-cli...

swagasaurus-rex 12y ago

> Your personal pics, videos... will all be leaked, a kind of secure golden shower The humor writes itself

brianmcc 12y ago
I pretty much sprayed my monitor with coffee when I read that in the article. Tremendous :-)

visarga 12y ago

The "Secure Golden Key" is as secure for the internet as the "Wonderful Beating Stick" is "wonderful" for a kid. Just because we put "wonderful" in the name of a beating stick does not make it so.

crististm 12y ago

the clipper chip is back on the radar

7952 12y ago

I understand the rightful distaste for backdoors. However, it occurs to me that any encryption system that could get widespread use would need some kind of mechanism to recover data in the event of loss of password/hardware/authentification device etc. The more valuable data is the more important backups are. I think that the general public would be reluctant to use any complete encryption product that could lead to loss of personal data such as email in the event of common human error. We need ways to recover data, and if those methods exist they could always be used by law enforcment. Encryption has to exist within the world as it is (with comprimises), not how you may want it to be. A secure encrypted backup recovery standard may actually make users safer, because what we have now is so much more vulnerable.

jleight 12y ago
I think the real point to take out of this is how important it is to have secure backups of your encryption key. Making sure that the encrypted data is backed up is common sense. Backing up the encryption key is just as important. If I were to lose my encryption key, I would absolutely expect to lose my data. That's how encryption works. That's how encryption should work. If I can get my data back without the encryption key, someone else can too.

franciscop 12y ago

Yet we have to recognize that a single, strong password that only you know is not good enough. Given the processing power evolution, a password that would be cited to take 100 years to break by a strong computer, in 10 years it would take 3 and in 20 years it would take 35 days. I hope by then we're thinking about which secure system to migrate to.

nathan_long 12y ago

> perhaps Apple and Google could invent a kind of secure golden key they would retain and use only when a court has approved a search warrant Even if the Washington Post has no idea how cryptography works, this is incredibly naive politically. "A court", you say? From which country? Google and Apple do business worldwide. Can China's courts access my data? Iran's? If Apple employees have the key, they decide. And if they decide, any country with enough monetary leverage can get the key. "You can't do business in China unless you give us access." (Not to mention the head-in-the-sand implication that the US government would only get data using due process.) The only way this can work is if the tech firm cannot access the data.

bhhaskin 12y ago

Who decides who the "good guys" are?