Remembering the lessons of the crypto wars
OTI URGES UN HUMAN RIGHTS COUNCIL TO PROMOTE THE BENEFITS OF STRONG ENCRYPTION
In January, Prime Minister David Cameron made headlines when he threatened to 鈥溾 in the UK. In an interview just a few days after the Paris terror attacks, Cameron made the case for surveillance backdoors, suggesting that there should be no “.” His comments fueled an ongoing debate between lawmakers, technology companies, and privacy advocates in the post-Snowden era about whether or not consumers should have access to strong encryption technologies that government investigators cannot break.
In the midst of it all, David Kaye, the United Nations Special Rapporteur on the protection and promotion of the right to freedom of opinion and expression, that his 2015 report to the Human Rights Council will address the use of encryption and anonymity in digital communications. He called on states, corporations, and civil society organizations to provide input on the relationship between encryption and free expression as he formulates the report, which will be presented in June. In response, OTI submitted explaining why we think access to encryption is fundamental to protect rights like privacy and free expression in the digital age.
Our comments look back on the history of the “Crypto Wars” of the 1990s and the lessons from that period that still apply today. During the Clinton Administration, policymakers and advocates debated the tradeoffs related to the proliferation of encryption technology both in the United States and overseas, and ultimately concluded that the positive benefits of encryption outweighed any potential negatives. The conflict was largely prompted by Administration鈥檚 1993 鈥溾 proposal 鈥 a small computer chip that could be inserted into consumer devices like cell phones to ensure that the government could access encrypted communications when they had a warrant or wiretap order. After a from privacy advocates, industry representatives, and prominent politicians, the proposal was abandoned in the mid-1990s. Around the same time, the Clinton Administration that it would relax export restrictions on products containing strong encryption, the beginning of a broader trend of liberalization of encryption export controls that continued throughout the 1990s and beyond.
There were four main arguments about the benefits of strong encryption that won the Crypto Wars, and we believe they are still relevant today:
-
Strong encryption is good for Internet security: Strong encryption both protects individuals鈥 private communications and improves the overall security of networks. That鈥檚 why technical experts pushed against the Clipper Chip proposal, which created vulnerabilities that could be exploited by unauthorized actors. Ultimately, telling companies to build in surveillance backdoors or weaken encryption is a bad idea: it undermines the security of their products, and it can slow the overall growth of a more secure Internet.
-
Strong encryption protects individual privacy: Encryption tools allow individuals to protect the privacy and safety of their data online. During the Crypto Wars, a wide range of technical experts, grassroots organizers, and prominent politicians (including John Ashcroft, who government-mandated backdoors 鈥淥rwellian鈥 in 1997) united behind the idea that individuals should be able to access to strong encryption free of surveillance backdoors for the government. Lawmakers like Representative Bob Goodlatte that the U.S. government should encourage 鈥 not stifle 鈥 the use of strong encryption to preserve civil liberties in the face of rapid technological change.
-
Strong encryption supports freedom of expression: The security and privacy protections afforded by the use of strong encryption also help . Frank LaRue, the previous UN Special Rapporteur on freedom of expression and opinion, has clearly demonstrated the link between privacy and free expression in to the UN Human Rights Council. Surveillance has a on free speech and the free flow of information online, which can slow the overall growth and use of the Internet.
-
Strong encryption promotes growth of the information economy: Strong encryption increases confidence in the security of online communications and transactions, which is a crucial step to enable the growth of the information economy and the migration of sensitive communications online.
The rapid growth of the Internet and the information economy after the end of the Crypto Wars illustrated the clear benefits of strong encryption. Many of the major titans of the Internet economy were founded in the five-year period immediately following the demise of the Clipper Chip proposal 鈥 including Ebay, Paypal, and Amazon, whose business models depend on people being able to conduct secure transactions online. Cryptographic innovations laid the groundwork for the emergence of services like online shopping, e-banking, and electronic health record systems. Today, technologies that rely on encryption are embedded in many of the products we use every day, including smartphones, home routers, and media streaming devices.
As the information economy has grown rapidly in the past two decades, the human rights and free expression benefits of open and secure Internet access have also become clear. That鈥檚 why support for strong encryption has also become an integral part of U.S. foreign policy related to in the 21st century. The U.S. government now millions of dollars in funding for circumvention tools and other programming that supports free expression, much of which relies on strong encryption.
Unfortunately, the ability to use strong encryption without surveillance backdoors has come under threat recently. The ignited a back-and-forth about encryption and individuals鈥 right to shield their private communications from government surveillance. In response to pressure from consumers and advocacy groups, the use of strong encryption in commercial products has accelerated in the past year and a half: in addition to high-profile announcements by and , the list of companies adding more encryption to their products and services is . But the trend toward greater use of encryption has also prompted law enforcement advocates here in the U.S. to return to past arguments that these technologies will exacerbate the 鈥溾 problem and frustrate some criminal investigations.
In the end, we think that policymakers should remember the lessons of history, so that we鈥檙e not doomed to repeat them. In our filing, we urge the UN Special Rapporteur to reiterate the benefits of encryption and defend its role as in protecting privacy and promoting free speech in the digital age. We point to the established legal and practical norm in the United States premised on the Crypto Wars鈥 conclusion that encryption is good for security, liberty, and economic growth. The President鈥檚 own Review Group on Intelligence and Communications Technologies 鈥 a panel of five experts commissioned by the President to make recommendations in the wake of the Snowden leaks 鈥 that it should be the official policy of the U.S. government to promote security by 鈥(1) fully supporting and not undermining efforts to create encryption standards; (2) making clear that it will not in any way subvert, undermine, weaken, or make vulnerable generally available commercial encryption; and (3) supporting efforts to encourage the greater use of encryption technology for data in transit, at rest, in the cloud, and in storage.鈥 We encourage the UN Special Rapporteur to make a similar recommendation to all UN Member States in his forthcoming report, emphasizing that governments can play a significant role in increasing the use of encryption, rather than attempting to thwart it.
OTI was not alone in reminding the UN Special Rapporteur about the value of strong encryption. Privacy and human rights advocates including Human Rights Watch, the , the , and the Center for Democracy & Technology also submitted comments this week.
Read our full filing to the UN Special Rapporteur . For more on the latest developments in the crypto debate, see our of major announcements and OpEds since September 2014.