<?xml version="1.0" encoding="utf-8"?>
<rss version="2.0" xml:base="http://www.edri.org" xmlns:dc="http://purl.org/dc/elements/1.1/">
<channel>
 <title>EDRI - Cryptography</title>
 <link>http://www.edri.org/taxonomy/term/30/0</link>
 <description></description>
 <language>en</language>
<item>
 <title>Netherlands: legislation for forced decryption announced</title>
 <link>http://www.edri.org/edrigram/number10.23/forces-decryption-legislation-netherlands</link>
 <description>&lt;p&gt;
&lt;i&gt;This article is also available in:&lt;br /&gt;
Deutsch: &lt;a href=&quot;https://www.unwatched.org/EDRigram_10.23_Niederlande_Zwang_zur_Entschluesselung_geplant?pk_campaign=edri&amp;pk_kwd=20121205&quot;&gt;Niederlande: Zwang zur Entschlüsselung geplant&lt;/a&gt;
&lt;/i&gt;
&lt;br /&gt;
&lt;br /&gt;
&lt;/p&gt;
&lt;p&gt;
The Dutch Minister of Justice has sent a letter to the House of
Representatives announcing a proposal for legislation that will allow
the police to force a suspect to decrypt information that is under
investigation in a case of terrorism or sexual abuse of children. The
Minister has ignored all major conclusions and recommendations set forth
in the report commissioned by his department.
&lt;/p&gt;
&lt;p&gt;
The Dutch House of Representatives has urged the Minister of Justice to
investigate the feasibility of such injunction.
&lt;/p&gt;
&lt;p&gt;&lt;a href=&quot;http://www.edri.org/edrigram/number10.23/forces-decryption-legislation-netherlands&quot;&gt;read more&lt;/a&gt;&lt;/p&gt;</description>
 <category domain="http://www.edri.org/issues/security/cryptography">Cryptography</category>
 <category domain="http://www.edri.org/issues/privacy">Privacy</category>
 <pubDate>Wed, 05 Dec 2012 19:34:18 +0000</pubDate>
 <dc:creator>bogdan</dc:creator>
 <guid isPermaLink="false">3155 at http://www.edri.org</guid>
</item>
<item>
 <title>People convicted in UK for refusing to surrender cryptographic keys</title>
 <link>http://www.edri.org/edri-gram/number7.16/decrypt-data-cases-ripa</link>
 <description>&lt;p&gt;
&lt;i&gt;This article is also available in:&lt;br /&gt;
Deutsch: &lt;a href=&quot;http://www.unwatched.org/node/1497&quot;&gt;Verurteilungen in Großbritannien für die Weigerung, Entschlüsselung...&lt;/a&gt;
&lt;/i&gt;
&lt;br /&gt;
&lt;br /&gt;
&lt;/p&gt;
&lt;p&gt;
According to the Annual Report of the Chief Surveillance Commissioner Sir
Christopher Rose to the UK Prime Minister and Scottish Ministers, people
were sentenced between 1 April 2008 and 31 March 2009 for not having given
their passwords or cryptographic keys, on the basis of powers provided to
authorities by section 49 of the Regulation of Investigatory Powers Act
(RIPA) that came into force in October 2007.
&lt;/p&gt;
&lt;p&gt;
The law, initially intended to deal with organised crime and terrorism,
allows the police and other enforcement agencies to demand from a person
passwords, encryption keys or a clea
&lt;/p&gt;
&lt;p&gt;&lt;a href=&quot;http://www.edri.org/edri-gram/number7.16/decrypt-data-cases-ripa&quot;&gt;read more&lt;/a&gt;&lt;/p&gt;</description>
 <category domain="http://www.edri.org/issues/security/cryptography">Cryptography</category>
 <pubDate>Wed, 26 Aug 2009 20:48:14 +0000</pubDate>
 <dc:creator>bogdan</dc:creator>
 <guid isPermaLink="false">2020 at http://www.edri.org</guid>
</item>
<item>
 <title>British court: people are bound to reveal computer encryption key</title>
 <link>http://www.edri.org/edri-gram/number6.20/ripa-application-uk</link>
 <description>&lt;p&gt;
(Dieser Artikel ist auch in &lt;a href=&quot;http://www.unwatched.org/node/1163&quot;&gt;deutscher Sprache&lt;/a&gt; verfügbar)
&lt;/p&gt;
&lt;p&gt;
Two persons were denied by the court the right to silence in relation to the
encryption key they were asked to reveal to the police.
&lt;/p&gt;
&lt;p&gt;
The men had brought as argument to the court that handing over the encrypted
key for the data in their computers would mean forcing them to incriminate
themselves. Defendants have a right to silence and to refuse to divulge
information that could be used as evidence against them.
&lt;/p&gt;
&lt;p&gt;
The Court of Appeal however considered that an encryption password is not
incriminating information in itself and that the key as well as the
information in the computers existed independently from the men just like
any key to a drawer and its content.
&lt;/p&gt;
&lt;p&gt;&lt;a href=&quot;http://www.edri.org/edri-gram/number6.20/ripa-application-uk&quot;&gt;read more&lt;/a&gt;&lt;/p&gt;</description>
 <category domain="http://www.edri.org/issues/security/cryptography">Cryptography</category>
 <pubDate>Wed, 22 Oct 2008 19:56:35 +0000</pubDate>
 <dc:creator>bogdan</dc:creator>
 <guid isPermaLink="false">1622 at http://www.edri.org</guid>
</item>
<item>
 <title>UK: Decrypt data or go to prison!</title>
 <link>http://www.edri.org/edrigram/number5.19/ripa-part3-uk</link>
 <description>&lt;p&gt;
(Dieser Artikel ist auch in &lt;a href=&quot;http://www.unwatched.org/node/664&quot;&gt;deutscher Sprache&lt;/a&gt; verfügbar)
&lt;/p&gt;
&lt;p&gt;
The controversial Part 3 of the Regulation of Investigatory Powers Act
(RIPA) in UK is in force starting with 1 October 2007. This new regulation
gives the power to police forces to ask for the disclosure of encryption
keys, or force suspects to decrypt encrypted data.
&lt;/p&gt;
&lt;p&gt;
RIPA was adopted in 2000, but Part 3 was not in force until last year when
the UK government has started a public consultation on its enforcement.
Despite the negative comments received from the security experts and the
major concerns that the adoption of such a measure will push businesses
outside UK, the authorities decided to uphold their initial position and
to apply the law starting with 1 October 2007.
&lt;/p&gt;
&lt;p&gt;&lt;a href=&quot;http://www.edri.org/edrigram/number5.19/ripa-part3-uk&quot;&gt;read more&lt;/a&gt;&lt;/p&gt;</description>
 <category domain="http://www.edri.org/issues/security/cryptography">Cryptography</category>
 <pubDate>Wed, 10 Oct 2007 18:01:52 +0000</pubDate>
 <dc:creator>bogdan</dc:creator>
 <guid isPermaLink="false">1312 at http://www.edri.org</guid>
</item>
<item>
 <title>Scrambling for Safety 8</title>
 <link>http://www.edri.org/edrigram/number4.16/scrambling</link>
 <description>&lt;p&gt;
(Dieser Artikel ist auch in &lt;a href=&quot;http://www.unwatched.org/node/221&quot;&gt;deutscher Sprache&lt;/a&gt; verfügbar)
&lt;/p&gt;
&lt;p&gt;
The Scrambling for Safety 8 focused on the UK Home Office consultations over
plans to give the police powers to require the production of decryption keys
and of plaintext. The Home Office produced a draft code of practice on
government access to &amp;quot;communications data&amp;quot; - phone numbers and e-mail
addresses contacted, web sites visited, locations of mobile phones etc.
&lt;/p&gt;
&lt;p&gt;
About 100 representatives of the Government, industry, academia and civil
society discussed privacy and security issues related to these
consultations.
&lt;/p&gt;
&lt;p&gt;
The police representatives used the event to defend their draft. They
considered the encryption was used more and more to hide evidences and
argued that these new provisions might be used only in connection with other
&lt;/p&gt;
&lt;p&gt;&lt;a href=&quot;http://www.edri.org/edrigram/number4.16/scrambling&quot;&gt;read more&lt;/a&gt;&lt;/p&gt;</description>
 <category domain="http://www.edri.org/issues/security/cryptography">Cryptography</category>
 <pubDate>Wed, 30 Aug 2006 16:19:26 +0000</pubDate>
 <dc:creator>bogdan</dc:creator>
 <guid isPermaLink="false">975 at http://www.edri.org</guid>
</item>
<item>
 <title>UK Government asks for the encryption keys</title>
 <link>http://www.edri.org/edrigram/number4.10/ukencryption</link>
 <description>&lt;p&gt;
The UK Home Office is planning to implement Part 3 of the Regulation of
Investigatory Powers Act (RIPA). That would allow the police forces to ask
for the disclosure of encryption keys, or force suspects to decrypt
encrypted data.
&lt;/p&gt;
&lt;p&gt;
RIPA was promoted in 2000, but until now the officials have not implement
Part 3. There were still voices that considered that parts I and III of the
Act should be reviewed to consider whether the Act was effective in meeting
its aims. However, until now, the Act has remained in its initial form .
&lt;/p&gt;
&lt;p&gt;
The Home Office have indicated that a consultation will be launched on
the 5th June. It is expected that this will say that the Part 3 is
needed to fight against an increased usage of encryption by criminals,
paedophiles, and terrorists.
&lt;/p&gt;
&lt;p&gt;
The Home Office minister of state, Liam Byrne, told Parliament last week
&lt;/p&gt;
&lt;p&gt;&lt;a href=&quot;http://www.edri.org/edrigram/number4.10/ukencryption&quot;&gt;read more&lt;/a&gt;&lt;/p&gt;</description>
 <category domain="http://www.edri.org/issues/security/cryptography">Cryptography</category>
 <category domain="http://www.edri.org/issues/security">Security</category>
 <pubDate>Wed, 24 May 2006 18:02:16 +0000</pubDate>
 <dc:creator>bogdan</dc:creator>
 <guid isPermaLink="false">894 at http://www.edri.org</guid>
</item>
<item>
 <title>Cryptography almost banned in the Czech Republic</title>
 <link>http://www.edri.org/edrigram/number3.24/cryptography</link>
 <description>&lt;p&gt;
The Czech Lower House recently approved of a law introducing a new Penal Code, including a ratification of the Cybercrime convention.
&lt;/p&gt;
&lt;p&gt;
The original version, prepared by the Ministry of Justice, contained a provision that would criminalise hacking and cracking IT systems, but due to misguided and very unclear wording it also criminalised legitimate activities such a cryptography, IT security testing etcetera. 
&lt;/p&gt;
&lt;p&gt;
The vagueness of the new law would have posed a serious threat of arbitrary criminalisation of legitimate activities and legal uncertainty in general.
&lt;/p&gt;
&lt;p&gt;
Together with a coalition of crypto-analysts, EDRI-observer IuRe was successful in suggesting amendments of the proposal, basing it more literally on the text of the Convention.
&lt;/p&gt;
&lt;p&gt;
The Senate still has to approve of the law, but nobody expects any challenges to the revised and improved provision.
&lt;/p&gt;
&lt;p&gt;&lt;a href=&quot;http://www.edri.org/edrigram/number3.24/cryptography&quot;&gt;read more&lt;/a&gt;&lt;/p&gt;</description>
 <category domain="http://www.edri.org/issues/security/cryptography">Cryptography</category>
 <pubDate>Mon, 05 Dec 2005 21:12:45 +0000</pubDate>
 <dc:creator>sjoera</dc:creator>
 <guid isPermaLink="false">771 at http://www.edri.org</guid>
</item>
<item>
 <title>Dutch government: Cryptophone protects privacy</title>
 <link>http://www.edri.org/edrigram/number2.4/crypto</link>
 <description>&lt;p&gt;
The Dutch minister of Justice Donner has answered parliamentary questions about the introduction of a commercially available crypto-GSM.
&lt;/p&gt;
&lt;p&gt;
The Cryptophone was developed in the Netherlands and is sold through a German company. The device is a combined GSM and organiser running Windows Pocket PC. The Cryptophone uses open-source software that encrypts the call when connecting to another device of its kind. The phone should make it impossible for any third-party, including the phone company and police, to listen in to the call.
&lt;/p&gt;
&lt;p&gt;
The Dutch Christian-Democrat Member of Parliament Haersma-Buma asked government to forbid the phones, since they can make it impossible for police to use the information from a wiretapped mobile phone call. Dutch police relies heavily on phone interception with an estimated 12.000 phone taps per year. This number is higher then in any other European country or even the US (not counting the unknown number of taps by any intelligence service).
&lt;/p&gt;
&lt;p&gt;&lt;a href=&quot;http://www.edri.org/edrigram/number2.4/crypto&quot;&gt;read more&lt;/a&gt;&lt;/p&gt;</description>
 <category domain="http://www.edri.org/issues/security/cryptography">Cryptography</category>
 <category domain="http://www.edri.org/issues/security">Security</category>
 <pubDate>Fri, 27 Feb 2004 10:00:54 +0000</pubDate>
 <dc:creator>sjoera</dc:creator>
 <guid isPermaLink="false">150 at http://www.edri.org</guid>
</item>
<item>
 <title>Recommended reading</title>
 <link>http://www.edri.org/edrigram/number2.1/reading</link>
 <description>&lt;p&gt;
On 14 January 2004 the Dutch scientist Bert Jaap Koops, working for the information law department of the University of Tilburg, released an update of his extensive Crypto Law Survey, a unique collection of worldwide resources about cryptography and the law. The new version contains updates about the legal situation of cryptography in 6 European countries:
&lt;/p&gt;
&lt;pre&gt;
 - Belgium (current state of Program Act)
 - Italy (radio-amateur law)
 - Lithuania (export and import controls, no domestic law)
 - Netherlands (no TTP law)
 - Spain (new Telecommunications Act)
 - Switzerland (radio-traffic law)
&lt;/pre&gt;
&lt;p&gt;
Crypto Law Survey, version 22.0 (14.01.2004)&lt;br /&gt;
&lt;a href=&quot;http://rechten.uvt.nl/koops/cryptolaw/&quot;&gt;http://rechten.uvt.nl/koops/cryptolaw/&lt;/a&gt; 
&lt;/p&gt;
&lt;p&gt;
Koops&#039; thesis on &#039;The Crypto Controversy&#039; is now also available online full-text in PDF. The Crypto Controversy gives an overview of the crypto problems for law-enforcement and their &#039;solutions&#039;.&lt;br /&gt;
&lt;/p&gt;
&lt;p&gt;&lt;a href=&quot;http://www.edri.org/edrigram/number2.1/reading&quot;&gt;read more&lt;/a&gt;&lt;/p&gt;</description>
 <category domain="http://www.edri.org/issues/security/cryptography">Cryptography</category>
 <pubDate>Thu, 15 Jan 2004 10:00:03 +0000</pubDate>
 <dc:creator>sjoera</dc:creator>
 <guid isPermaLink="false">96 at http://www.edri.org</guid>
</item>
<item>
 <title>Dutch parliament questions crypto telephone</title>
 <link>http://www.edri.org/edrigram/number23/cryptophone</link>
 <description>&lt;p&gt;
The presentation of a crypto mobile telephone has stirred some controversy
in the Netherlands. The Cryptophone has been developed in the Netherlands
and is sold through a German company. The device is a combined GSM and
organiser running Windows Pocket PC. The software encrypts the call when
connecting to another Cryptophone. The Cryptophone should make it
impossible for any third-party, including the phone company and police, to
listen to the call.
&lt;/p&gt;
&lt;p&gt;
The Dutch christian-democrat Member of Parliament Haersma-Buma has asked
the Dutch government if there is a possibility of forbidding the phones,
since they can make it impossible for police to use the information from a
wiretapped mobile phone call. Dutch police relies heavily on phone
interception with an estimated 12.000 phone taps per year. This number is
&lt;/p&gt;
&lt;p&gt;&lt;a href=&quot;http://www.edri.org/edrigram/number23/cryptophone&quot;&gt;read more&lt;/a&gt;&lt;/p&gt;</description>
 <category domain="http://www.edri.org/issues/security/cryptography">Cryptography</category>
 <category domain="http://www.edri.org/issues/technology">New technology</category>
 <category domain="http://www.edri.org/issues/privacy/wiretapping">Wiretapping</category>
 <category domain="http://www.edri.org/issues/security">Security</category>
 <pubDate>Wed, 03 Dec 2003 19:00:47 +0000</pubDate>
 <dc:creator>sjoera</dc:creator>
 <guid isPermaLink="false">515 at http://www.edri.org</guid>
</item>
</channel>
</rss>
