The Next Encryption Battleground: Congress

Apr 14, 2016
Originally published on April 14, 2016 2:14 pm

The war over government access to encryption is moving to the battlefield on which Apple told the Justice Department it should always have taken place: Capitol Hill.

The leaders of the Senate Intelligence Committee have introduced a bill that would mandate those receiving a court order in an encryption case to provide "intelligible information or data" or the "technical means to get it" — in other words, a key to unlock secured data.

"I call it a 'follow the rule of law bill,' because that's what it does: It says nobody's exempt from a court order issued by a judge on the bench," said Committee Chairman Richard Burr, a North Carolina Republican. The top Democrat on the committee, California's Dianne Feinstein, is a co-sponsor.

Supporters say that Congress must give law enforcement officials the tools they need to investigate cases like those that prompted the showdown between Apple and the government.

The Justice Department asked a judge to order Apple to help it unlock an iPhone connected to last year's San Bernardino shootings, something the company said would effectively create a master key that would compromise millions of other iPhones around the world. Ultimately, the government did not force the case to a resolution. Instead, it reportedly opted to pay "gray hat" hackers to unlock the phone.

But for future cases, advocates in Congress say the government must be guaranteed access to any relevant information when it investigates terrorist plots or other crimes.

"The American public have realized that if it's done in a reasonable way, with legal support and oversight, there are instances where it would be feasible to force a company to unlock [a suspected terrorist's] phone," said Indiana Republican Dan Coats, a Senate Intelligence panel member who strongly backs the draft legislation.

The White House declined to comment on the bill. But President Obama recently chided those who oppose court-ordered data access.

"If your argument is, 'strong encryption no matter what' and 'we can and should, in fact, create black boxes,' that, I think, does not strike the kind of balance that we have lived with for 200, 300 years," Obama said at last month's South by Southwest conference. "And it's fetishizing our phones above every other value."

Advocates for digital security warn that the Senate's proposed legislation could cause immense harm.

"It is hard to overstate how disastrous for the security of all of our data as well as the economic security of our tech sector this bill would be," said Kevin Bankston, director of the Open Technology Institute at New America, a Washington think tank.

Members of Congress simply don't understand the implications of forcing companies to provide digital back doors to technology that's supposed to be secure, Bankston says.

"It's not possible to build some special access capability for the government into our most secure data without also making it vulnerable to other bad actors," he said. "And yet this bill says, 'We don't care. Do magic, find a way to secure all of our data while also making it available on demand to the government at any time.' And that's simply not possible."

Other critics warn the bill could shake peoples' trust in the security of American products and drive business elsewhere.

"If American companies are forced to make sure that the government could sneak into every conversation that their customers have, then normal customers who care about their security and privacy would be looking for foreign companies to supply their needs, even if they buy them abroad and bring them here," said Gary Shapiro, president of the Consumer Technology Association, a trade group representing 2,400 firms, including Apple.

The bill is also causing heartburn on Capitol Hill.

Oregon's Democratic Sen. Ron Wyden believes the proposed legislation would actually make Americans less safe.

"I will do everything in my power as a senator to prevent something like this, that would damage the security and well-being of the country by weakening encryption," he said. Wyden, the Intelligence Committee's No. 2 Democrat, said he is prepared to mount a filibuster against the bill if it came to the Senate floor to try to stop it from advancing.

But the possibility of terrorists using protected technology to plan attacks is pushing others in Congress to call for action.

"If there is another attack in the United States," said Indiana's Coats, "the American people will be saying, 'Did you do everything you possibly could to prevent this?' "

Copyright 2018 NPR. To see more, visit http://www.npr.org/.

RENEE MONTAGNE, HOST:

There's been a lot of tension lately between those who want personal data on devices like cell phones to be secure and those who want access to it for criminal investigations - case in point, the recent standoff between Apple and the FBI over a locked smartphone tied to the San Bernardino massacre. Now some prominent senators are pushing a bill saying companies like Apple must guarantee court-ordered access to that kind of data. NPR's David Welna reports.

DAVID WELNA, BYLINE: The nine-page draft bill is called the Compliance of Court Orders Act of 2016. Richard Burr, the Republican who chairs the Senate Intelligence Committee is, along with top committee Democrat Dianne Feinstein, that bill's co-sponsor.

(SOUNDBITE OF ARCHIVED RECORDING)

RICHARD BURR: I call it a follow the rule of law bill because that's what it does. It says nobody's exempt from a court order issued by a judge on the bench.

WELNA: Specifically, the bill requires those who received such a court order to provide, quote, "intelligible information or data or the technical means to get it," in other words, a key to unlock secure data. Senate Intelligence panel member Dan Coats strongly backs the bill. The Indiana Republican says Congress is acting by popular demand.

(SOUNDBITE OF ARCHIVED RECORDING)

DAN COATS: The American public have realized that if it's done in a reasonable way with legal support and oversight, there are instances where it would be feasible to force a company to unlock the phone.

WELNA: The White House declined to comment on the bill. But at last month's SXSW conference, President Obama chided those who opposed court-ordered data access.

(SOUNDBITE OF ARCHIVED RECORDING)

PRESIDENT BARACK OBAMA: If your argument is strong encryption no matter what and we can and should, in fact, create black boxes, then I - that, I think, does not strike the kind of balance that we have lived with for 200, 300 years. And it's fetishizing our phones above every other value.

WELNA: Meanwhile, advocates for digital security are warning the Senate's proposed legislation could cause immense harm.

KEVIN BANKSTON: It is hard to overstate how disastrous for the security of all of our data as well as the economic security of our tech sector this bill would be.

WELNA: That's Kevin Bankston. He directs the Open Technology Institute at New America, a Washington think tank. Bankston says lawmakers simply don't understand the implications of forcing companies to provide digital backdoors to technology that's supposed to be secure.

BANKSTON: It's not possible to build some special access capability for the government into our most secure data without also making it vulnerable to other bad actors. And yet, this bill says we don't care. Do magic. Find a way to secure all of our data while also making it available on demand to the government at any time. And that's simply not possible.

WELNA: Others warn the proposed bill could shake people's trust in the security of American products and drive business elsewhere. Gary Shapiro heads the Consumer Technology Association. It's a trade group representing 2,400 American firms, including Apple.

GARY SHAPIRO: If American companies are forced to make sure that the government can sneak into every conversation that customers have, then normal customers who care about their security and privacy would be looking for foreign companies to supply their needs, even if they buy them abroad and bring them here.

WELNA: The bill is also causing heartburn on Capitol Hill. Oregon's Ron Wyden is the number two Democrat on the Senate Intelligence Committee. He says the proposed legislation would actually make Americans less safe.

(SOUNDBITE OF ARCHIVED RECORDING)

RON WYDEN: I will do everything in my power as a senator to prevent something like this that would damage the security and well-being of the country by weakening encryption.

WELNA: But Indiana Republican Coats says the possibility of terrorists using protected technology to plan attacks really leaves Congress no other choice.

(SOUNDBITE OF ARCHIVED RECORDING)

COATS: If there is another attack in the United States, the American people will be saying, did you do everything you possibly could to prevent this?

WELNA: The answer may depend on whether this bipartisan bill really enhances American security or undermines it. David Welna, NPR News, Washington. Transcript provided by NPR, Copyright NPR.