[5659] in cryptography@c2.net mail archive

home help back first fref pref prev next nref lref last post

Re: Why did White House change its mind on crypto?

daemon@ATHENA.MIT.EDU (staym@accessdata.com)
Fri Sep 17 17:13:40 1999

From: staym@accessdata.com
Message-ID: <37E2A411.77EA@accessdata.com>
Date: Fri, 17 Sep 1999 14:26:57 -0600
MIME-Version: 1.0
To: Greg Broiles <gbroiles@netbox.com>
Cc: Russell Nelson <nelson@crynwr.com>, cryptography@c2.net,
        cypherpunks@cyberpass.net
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit

Our company works with the FBI a lot.  We provide the software they
actually use to recover passwords.  

The majority of software out there uses access-denial: the encryption /
ofuscation doesn't depend on the password.  But to be acceptable in
court, you have to prove that you didn't change a single bit of
evidence.  That's why all our software recovers passwords instead of
simply removing the protection.  

If the law passes, we'll probably end up providing them with trojan
horses & stuff.  Basically, they're going to be glorified keyboard
sniffers, because the courts (no matter what the law says--they get to
interpret the law) aren't going to accept that a message wasn't faked
unless the prosecutor can prove that it is the decryption of a
ciphertext.  To do that, all they need is a password that works, so
that's what they'll focus on capturing.
-- 
Mike Stay
Programmer / Crypto guy
AccessData Corp.
mailto:staym@accessdata.com


home help back first fref pref prev next nref lref last post