女生小视频

Technology

Why breaking encryption is a bad idea that could never work

By Timothy Revell

27 March 2017

The WhatsApp app icon on a phone

WhatsApp offers end-to-end encryption

Rex/Shutterstock

Here we go again. UK Home Secretary Amber Rudd has said that end-to-end encryption in apps like WhatsApp is 鈥渃ompletely unacceptable鈥 and that there should be 鈥渘o hiding place for terrorists鈥. Her comments resurface the debate over banning encryption 鈥 an idea that is realistically unworkable and potentially mathematically impossible.

Speaking on BBC One鈥檚 Andrew Marr Show, Rudd called for the intelligence services to have access to encrypted messages, following the revelation that British extremist Khalid Masood used WhatsApp a few minutes before killing four people in Westminster last week. But her comments are ill-informed at best.

鈥淢y impression was that primarily she doesn鈥檛 know what she is talking about,鈥 says at the University of East Anglia, UK.

Not just for terrorists

Encryption underpins everything from messaging apps to online shopping to government websites. It works by jumbling up information sent across the internet in such a way that only the intended recipient can de-jumble it. Anyone who intercepts the signal would require a nearly impossible amount of computing power and time to work out the contents of the message.

An outright ban on end-to-end encryption would mean no more online banking, no more online shopping, and no more online privacy. 鈥淓ncryption is not just for terrorists, it鈥檚 for everyone,鈥 says at the Electronic Frontier Foundation.

Even if a government attempted such a ban, it could never legislate the mathematics of encryption out of existence. People who really wanted to would still be able to find ways to encrypt their messages.

Another way to get past encryption could be to insist that encrypted services add a 鈥渂ackdoor鈥 to their product. Intelligence services would have access to this backdoor, meaning they could read encrypted messages between people of interest, while everyone else would still benefit from the security of encryption. But in reality, this is unworkable.

Once there is a back door in a service, it would be vulnerable to attack. Any sufficiently capable group could gain access to the encrypted information 鈥 which could pose a far bigger inconvenience to security services than not having sweeping access to WhatsApp messages. If you create a backdoor for the good guys, you create a backdoor for the bad guys too.

Hacking devices

In any case, it would not be necessary for security services to break encryption for everyone in order to read WhatsApp messages on a suspect鈥檚 phone. Last year, the government passed the Investigatory Powers Act 鈥 also known as the 鈥淪nooper鈥檚 Charter鈥 – which allows security services to directly access people鈥檚 devices when they have a warrant to do so. 鈥淚f they identify a person of interest, they can hack the device and read what鈥檚 on it,鈥 says Bernal. This means they wouldn鈥檛 have to crack encryption to intercept the information.

We don鈥檛 know if Khalid Masood said anything on WhatsApp that might have revealed his intentions. But we do know that he was known to the police but was not under investigation. Had he been, the security services already had the powers needed to read his messages.

Bernal thinks that encryption is simply an easy target in an issue that is far more complex. 鈥淚t鈥檚 much easier to blame the internet. Instead of talking about if he was radicalised in prison and what policies could have led to that, we鈥檙e focusing on encryption.鈥

Topics:

Sign up to our weekly newsletter

Receive a weekly dose of discovery in your inbox. We'll also keep you up to date with New 女生小视频 events and special offers.

Sign up
Piano Exit Overlay Banner Mobile Piano Exit Overlay Banner Desktop