Former FBI chief takes on encryption

When Louis Freeh ran the FBI, he loved nothing more than launching into a heartfelt rant against the dangers of encryption technology.

In dozens of hearings and public speeches, the FBI director would urge Congress to limit encryption products, such as Web browsers and email scrambling utilities, that did not include backdoors for government surveillance.

Freeh didn't succeed. In fact, the Clinton administration veered in the opposite direction and eventually permitted, with few restrictions, the overseas shipments of data-scrambling products.

But Freeh, who left the FBI in June 2001, hasn't given up. During an appearance before the Senate Intelligence committee last week, he warned that the political reality after the 11 September terrorist attacks means that it's time to reconsider what to do with encryption.

"Robust and commercially available encryption products are proliferating, and no legal means has been provided to law enforcement to deal with this problem, as was recently done by parliament in the United Kingdom," Freeh said in his testimony. "Terrorists, drug traffickers and criminals have been able to exploit this huge vulnerability in our public safety matrix."

According to a law called the Regulation of Investigatory Powers Act, UK government agencies can demand encryption keys relating to intercepted data communications that are scrambled. Anyone not complying with the request faces a prison sentence of up to two years.

Freeh acknowledged last week that he has been campaigning "about this problem for many years" and said that the International Association of Chiefs of Police, the 50 state attorneys general, and the National Association of District Attorneys have pointed to the proliferation of encryption as the most critical technology issue facing law enforcement. Encrypted computer files found in Manila belonging to Ramzi Yousef, the mastermind behind the 1993 World Trade Center bombing, proved that terrorists are using this technology, Freeh said.

In September 1997, the FBI persuaded one committee in the House of Representatives to work toward making a federal crime of manufacturing, selling or importing unapproved encryption devices, including hardware and software such as Web browsers, Pretty Good Privacy (PGP), and the SSH utility. That bill never made it to the House floor.

Freeh's evident passion about what was an obscure debate to most politicians prompted Sen. Judd Gregg, R-N.H., to ask him in 1999: "Have you given up on encryption?"

Replied Freeh: "I have not given up on encryption." In his statement at the time, he said that "law enforcement remains in unanimous agreement that the continued widespread availability and increasing use of strong, non-recoverable encryption products will soon nullify our effective use of court-authorised electronic surveillance."

In May 2002, according to a report by the Canadian Broadcasting Corp., Freeh said that companies such as Microsoft must be legally obligated to hand over the keys needed to decipher encrypted messages. Freeh, according to the CBC, said that doing so could prevent al-Qaida terrorists from talking via the Internet.

Soon after the 11 September attacks, Gregg said he would introduce legislation to limit the availability of encryption without backdoors for government spying. After encountering widespread criticism, however, Gregg chose not to introduce the proposal.

Advertisement

Talkback 5 comments

    Why should people have greater ...Anonymous -- 19/10/02

    Why should people have greater electronic privacy than they have in the "real" world?

    Now that 9/11 proves that there is a REAL world with deadly conspirators out to cause us harm, do we really have the luxury of providing encryption so that weak people suffering from some addiction can exchange messages over the Internet that they possibly would be better not even exchanging in their bedroom?

    Consider the Internet a public street. In the old days, the store owner could carry his receipts in a paper bag to the bank and the banks records were easily opened by a court order.

    We need to view privacy over the Internet as no more appropriate than privacy on that public street. Business records need to be as secure as necessary to protect from theives and extortionists.... it is NOT required to be military-grade secure! ....especially when that technology can so easily used to aid terrorists!

    We have encryption for the sam ...St3ph3n -- 07/08/03

    We have encryption for the same reason its our right to own a gun. We have a right to privacy.

    As for the storeowner walking his receipts down to the bank...it's a lot LESS secure to have clerks and other personel looking at your financials.

    Good luck with the identity theft.

    Trying to "Outlaw" E ...R2D2 -- 17/09/03

    Trying to "Outlaw" Encryption, is even less likely than trying to "Outlaw" Guns. All "Outlawing" does is make it a crime, and criminals really don't care if you add one more crime to their list of charges.

    There is absolutly no possable way to regulate the world. Which is what it would take to stop any of this. Try and outlaw plastic explosives.

    Today anyone can download the source code for AES, Blowfish or any of the other "high" level encryption standards.

    The Eagle Has Landed. (whateve ...Anonymous -- 23/10/03

    The Eagle Has Landed.
    (whatever that means....)
    Codes vary from very simple to very complex, and 'code breakers' cannot rely on law makers or law enforcement to "just get the key".
    Legislation and law enforcement only goes so far.
    Having 'Big Brother' watching will annoy a lot of people, and perhaps give 'Big Brother' a false sense of 'security'.
    If a software house can write encryption packages, so can state-sponsored terrorists - and they are not going to give the key to FBI when they are using it.
    The 'good people' will obey the law and 'the others' will find a way around it.

    Goverment is terroist Anonymous -- 03/06/09

    The real terrorists are the government. We the people want a back door to your encrypted communications, because you can't be trusted.

Add your opinion

Latest Videos

Sponsored content

Power Centre - Content from our premier sponsors

Blogs

  • Chris Duckett Get extensions going in Firefox, redux
    Previously on Null Pointer we looked at getting extensions working in Firefox betas, and that was great until the fine folks at Firefox changed their minds.
  • Array How reliable is IP telephony?
    Have you ever heard a weird kind of hissing, crackling or popping noise when calling someone on an IP telephony line? How rare is the phenomenon these days?
  • Array Forget the NBN, 100Mbps is already here
    Telstra and TransACT will shortly begin offering 100Mbps broadband to many customers. By moving early, the companies have not only raised the bar for Australia's broadband services, but thrown down a challenge to a government that now faces increased pressure to deliver the NBN as promised.
  • More blogs »

Tags

Back to top

Featured