FBI chief Comey says strong encryption diminishes agency's efforts
In two congressional hearings Wednesday, FBI Director James Comey urged tech companies to work with law enforcement agencies so that encryption on consumer devices won鈥檛 hinder criminal and terrorist investigations.
Mr. Comey told senators that encryption allows criminal suspects to cloak their communications 鈥� which he refers to as 鈥済oing dark鈥� 鈥� in a way that eludes agents and has the potential to harm public safety and national security. Therefore, he said, the government should have some way to access data protected by encryption.
鈥淚f we intercept data in motion between two encrypted devices across an encrypted mobile app, we can鈥檛 break it,鈥� Comey said. "On the current course and current speed, my ability to discharge my No. 1 responsibility would be materially diminished in the not too distant future. It鈥檚 certainly diminished today.鈥�
Growing calls by Obama administration officials such as Comey and Adm. Mike Rogers, head of the National Security Agency, for technology companies to allow the government access to private data has set off a fierce debate within the technology community over the use of encryption. Privacy experts and tech executives have repeatedly said that weakening encryption to give government access to data would compromise privacy safeguards for all users.
But Comey said he wants to work with American technology companies so that customers will be able to use encryption and tech companies can still comply with warrants to give investigators access users' information. Current encryption on mobile devices means only the user can access the encrypted data. The tech companies that manufacture the hardware can鈥檛 unlock it even if they wanted to.
Still, Comey told the Senate Intelligence Committee in the afternoon, he wants to start a 鈥渃onversation鈥� on how to create some form of law enforcement access to encryption. 鈥淭he innovation is here, the energy is here, the infrastructure is here, what we do here will set the tone and the pattern for the rest of the world.鈥�
Deputy US Attorney General Sally Yates, who testified alongside Comey at Wednesday morning鈥檚 Senate Judiciary Committee hearing, said the government is not asking for so-called "back doors" into encryption.
鈥淲hat we are seeking,鈥� she said, 鈥渋s to be able to work with the industry such that the companies themselves will be able to retain an ability to be able to access the information and to provide that information to us with lawful court orders."
Matthew Green, a Johns Hopkins University cryptographer, says allowing companies to implement solutions to give law enforcement data access has problems. Letting companies have a key to encrypted data could create new vulnerabilities in encryption as well as additional security risk for the companies and individual customers.
Even if companies were able to produce such a solution, it may prove too technically challenging to smaller tech firms and app makers, Dr. Green said.
"I trust Apple, I trust Google, but smaller companies with only five people don鈥檛 have cryptography experts and won鈥檛 be able to get it right,鈥� he said. 鈥淢y guess is many companies will determine that getting end-to-end encryption to work will increase liability, and say no to encryption," said Green, who was one of several respected cryptographers and security researchers who coauthored released Tuesday outlining the security risks in allowing government access to secure data.
Unlike a previous House hearing on the issue of encryption, in which one congressman called the notion of giving law enforcement access to secured data 鈥渢echnologically stupid,鈥� senators largely approached the issue today without vitriol, though Sen. Ron Wyden (D) of Oregon suggested that the government may not be coping with issues of cryptography if it weren't for the听National Security Agency revelations about its surveillance program. After those programs were revealed by NSA leaker Edward Snowden, tech companies took steps to strengthen security measures on their devices.
鈥淎s we start this debate, I want to emphasize how exactly we got here. Executive branch agencies are now dealing with a problem they largely created,鈥� said Senator Wyden.
Comey didn't offer any evidence regarding FBI investigations thwarted by strong encryption technology. At a separate Judiciary Committee panel Wednesday, Cyrus Vance Jr., a New York district attorney representing Manhattan, provided the only concrete statistics on how many times mobile encryption had prevented law enforcement from accessing data during an investigation. Over the past six months, he said investigators couldn鈥檛 access data on 72 out of 92 iPhones running the latest version of Apple's mobile operating system.
Yet, Comey suggested that most 鈥渙rdinary folks鈥� aren鈥檛 interested in having phones with strong encryption. 鈥淚 don鈥檛 exactly know where the great demand for this is coming from,鈥� he said. 鈥淚 don鈥檛 know ordinary folks who say, 鈥業 want a phone that can鈥檛 be opened even if an American judge finds that it ought to be opened because it鈥檚 really important.'"
The original version of this story was updated.
听
