[5659] in cryptography@c2.net mail archive
Re: Why did White House change its mind on crypto?
daemon@ATHENA.MIT.EDU (staym@accessdata.com)
Fri Sep 17 17:13:40 1999
From: staym@accessdata.com
Message-ID: <37E2A411.77EA@accessdata.com>
Date: Fri, 17 Sep 1999 14:26:57 -0600
MIME-Version: 1.0
To: Greg Broiles <gbroiles@netbox.com>
Cc: Russell Nelson <nelson@crynwr.com>, cryptography@c2.net,
cypherpunks@cyberpass.net
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Our company works with the FBI a lot. We provide the software they
actually use to recover passwords.
The majority of software out there uses access-denial: the encryption /
ofuscation doesn't depend on the password. But to be acceptable in
court, you have to prove that you didn't change a single bit of
evidence. That's why all our software recovers passwords instead of
simply removing the protection.
If the law passes, we'll probably end up providing them with trojan
horses & stuff. Basically, they're going to be glorified keyboard
sniffers, because the courts (no matter what the law says--they get to
interpret the law) aren't going to accept that a message wasn't faked
unless the prosecutor can prove that it is the decryption of a
ciphertext. To do that, all they need is a password that works, so
that's what they'll focus on capturing.
--
Mike Stay
Programmer / Crypto guy
AccessData Corp.
mailto:staym@accessdata.com