Intellectual Property Law

Bodies in Your Freezer?

By Tim Feathers

Let’s assume that you have an un-pickable lock on an impenetrable freezer in your basement, and assume further that freezer is full of body parts from your victims (these are assumptions – right?). The Feds think they know what's in there, but they can’t get in unless you unlock it. Can they legally compel you to open it, or can you avoid being so compelled by invoking your 5^th Amendment right to not incriminate yourself?

The equivalent of this scenario is playing out in child pornography cases around the country, where the alleged pornographers have used widely available public encryption products (which are very secure), to lock up the damning content on their computers. Without the magic words (or encryption key), law enforcement will, as a practical matter, never know what is on that drive. Law enforcement argues that where the intent is purely to hide evidence of a crime, there needs to be some way for the courts to allow law enforcement to access the evidence.  They are starting to ask the courts to compel the bad guys to cough up the passwords. 

Interestingly, in the case that is currently getting all of the attention on this, US v. Boucher, federal Magistrate Judge Jerome J. Niedermeier has addressed the “opening of the safe” analogy, concluding that if the safe requires a physical key, a suspect can be compelled to turn it over, but if it is a combination that exists in the persons head, disclosing that is tantamount to a “testimonial act” implicating the 5^th Amendment. Therefore, he ruled that requiring the suspect to enter his password would violate his right against self-incrimination. (So what if the combination is written down – is that writing the equivalent to a physical key? And even if it is the same as a physical key, isn’t the knowledge of the location of the writing in that person's head - the disclosure of which would involve a “testimonial act”, and on and on). The government has appealed, and the case is currently being investigated by a grand jury.

The case is unique to digital information, because the analogy that there is just no other way to get the evidence does not really hold up in the physical world. There is always some way to get into the safe. However, using widely available open source encryption software, such as PGP, it is virtually impossible to unencrypt files without the password. The only thing to do is to use automated guessing software, that systematically and repeatedly guesses at the password - a process that could take many years, even with a lot of computing power. The Feds are scared, because an adverse ruling here could create a safe harbor for information that would be essentially unreachable, potentially benefiting drug dealers, terrorists, and the child pornography industry. Civil Liberty groups such as the EFF say unbreakable encryption “is one of the few ways people can protect what they write, read and watch online,” and support the application of 5^th Amendment rights in cases such as these.  This will be interesting to follow.  It is definitely one where the new technology is creating some interesting challenges for the application of existing laws.

The Washington Post article on this topic is here.

Related New York Times article is here.

Photo complements of Colin Ashe under creative commons

Full post as published by The TechKnowledgy Blog on January 17, 2008 (boomark / email).