The deadly attacks in Paris may soon reopen the debate over whether - and how — tech companies should let governments bypass the data scrambling that shields everyday commerce and daily digital life.
So far, there's no hard evidence that the Paris extremists relied on encrypted communications - essentially, encoded digital messages that can't be read without the proper digital “keys” - to plan the shooting and bombing attacks that left 129 dead on Friday. But it wouldn't be much of a surprise if they did.
So-called end-to-end encryption technology is now widely used in many standard message systems, including Apple's iMessage and Facebook's WhatsApp. Similar technology also shields the contents of smartphones running the latest versions of Apple and Google operating software. Strong encryption is used to protect everything from corporate secrets to the credit-card numbers of online shoppers to intimate photos and secrets shared by lovers.
That widespread use of encryption, which was previously restricted to more powerful desktop or server computers, is exactly what worries members of the intelligence and law enforcement communities. Some are now using the occasion of the Paris attacks to once again argue for restrictions on the technology, saying it hampers their ability to track and disrupt plots like the Paris attacks.
“I now think we're going to have another public debate about encryption, and whether government should have the keys, and I think the result may be different this time as a result of what's happened in Paris,” former CIA deputy director Michael Morell said Monday on CBS This Morning.
The last such debate followed 2013 disclosures of government surveillance by former National Security Agency contractor Edward Snowden. Since then, tech companies seeking to reassure their users and protect their profits have adopted more sophisticated encryption techniques despite government opposition. Documents leaked by Snowden also shed light on NSA efforts to break encryption technologies.
The Obama administration continues to encourage tech companies to include such backdoors, although it says it won't ask Congress for new law that requires them.
“The Snowden revelation showed that backdoors can be destructive, particularly when they're done in secrecy without transparency,” says Will Ackerly, a former NSA security researcher and the co-founder of Virtru, which provides encryption technology for both companies and individual people. On Monday, Attorney General Loretta Lynch said the government continues to have “ongoing discussions” with industry about ways in which companies can lawfully provide information about their users while still ensuring their privacy. Last week in Dublin, Apple CEO Tim Cook noted that “there's no such thing as a backdoor for the good guys only. If there's a backdoor, anybody can come in.”
