Agencies ask encryption trade-off

Deputy Attorney General Sally Yates testifies Wednesday before the Senate Judiciary Committee along with FBI Director James Comey during a hearing in which senators were warned that encryption technology makes it harder to track criminals.
Deputy Attorney General Sally Yates testifies Wednesday before the Senate Judiciary Committee along with FBI Director James Comey during a hearing in which senators were warned that encryption technology makes it harder to track criminals.

WASHINGTON -- Federal law enforcement officials warned Wednesday that data encryption is making it harder to hunt for pedophiles and terror suspects, telling senators that consumers' right to privacy must be weighed against public-safety interests.

The testimony before the Senate Judiciary Committee marked the latest front in a high-stakes dispute between President Barack Obama's administration and some of the world's most influential tech companies.

FBI and Justice Department officials have repeatedly asserted that encryption technology built into smartphones makes it harder to monitor and intercept messages from criminal suspects, such as Islamic State sympathizers who communicate online and child predators who conceal pornographic images.

Officials said it is imperative that they be able to access encrypted communications during investigations and that companies should maintain the ability to unlock their customers' data.

But they face opposition from Silicon Valley companies, who say encryption safeguards their customers' privacy rights and protects them from hackers, corporate spies and other breaches. The companies in recent months have written to the Obama administration and used public speeches to argue for the value of strong encryption.

FBI Director James Comey, who has pressed his case repeatedly over the past year before think tanks and in other settings, sought Wednesday to defuse some of the tension surrounding the dispute. He told senators that he believed technology companies were fundamentally on the same page as law enforcement officials, adding, "I am not here to fight a war."

"Encryption is a great thing. It keeps us all safe. It protects innovation," Comey said. "It protects my children. It protects my health care. It is a great thing."

But he said criminals were using encryption to create a safe zone from law enforcement. He said the concern was especially acute at a time when the Islamic State has been recruiting sympathizers through social media and then directing them to encrypted platforms that federal agents cannot access.

"Our job is to look [in] a haystack the size of this country for needles that are increasingly invisible to us because of encryption," he said.

Deputy Attorney General Sally Yates said the Justice Department was not yet seeking a legislative fix for the issue and was instead hoping to work cooperatively with the technology companies.

She expressed concern about end-to-end encryption, in which only the user can access the communication. And she encouraged more companies -- not the government -- to retain a key that can unlock their customers' encrypted data when law enforcement agencies want to access it.

"The current public debate about how to strike the careful balance between privacy rights and public safety has at times been a challenging and highly charged discussion," Yates told the committee.

Personal privacy and Internet security, she said, "are not absolute. And they have to be balanced against the risks we face from creating warrant-proof zones of communication."

Sen. Dianne Feinstein, D-Calif., echoed Comey's concerns about encryption, saying it could enable a "respite from any kind with law enforcement." But others reacted more warily to that perspective.

Sen. Al Franken, D-Minn., pointed out that a recent breach of Office of Personnel Management information involved highly sensitive, personal information that had not been encrypted. Given that, he asked whether there was a "danger, if we do this wrong, of there also being a national security risk?"

And Vermont Sen. Patrick Leahy, the panel's senior Democrat, said he wasn't convinced how much it would help to facilitate law enforcement officials' access to encrypted material.

"Strong encryption would still be available from foreign providers," Leahy said. "Some say that any competent Internet user would be able to download strong encryption technology, or install an app allowing encrypted communications -- regardless of restrictions on American businesses."

Tech companies call the concerns overblown and vow to protect customer privacy. They have said any key that could give law enforcement officials access to encrypted devices could presumably be exploited by hackers and criminals, too.

In a speech last month, Apple Chief Executive Officer Tim Cook said the company would not waver in offering encryption tools to customers and said weakening encryption would have a "chilling effect on our First Amendment rights and undermines our country's founding principles."

And in a May letter to the White House, a tech-company coalition argued that strong encryption protects against "innumerable" threats and urged the government to "reject any proposal that U.S. companies deliberately weaken the security of their products."

A Section on 07/09/2015

Upcoming Events