UK and allies call for backdoors in encryption products

The governments of the UK, US and other Five Eyes alliance partners Canada, Australia and New Zealand say government authorities should be able to seek access to otherwise private information.

The group says it encourages information and communications technology service providers to voluntarily establish lawful access solutions to their products and services, but warns in a statement that should governments “continue to encounter impediments to lawful access to information necessary to aid the protection of the citizens of our countries, we may pursue technological, enforcement, legislative or other measures to achieve lawful access solutions”.

The statement is part of an official communiqué issued after a recent meeting of representatives of the alliance partners in Australia to discuss collaboration and security challenges. Other topics addressed in the communique include: a free, open safe and secure internet; countering the threat of terrorism; cyber security and resilience of critical infrastructure; and criminal information sharing.

The alliance partners say they are “committed to personal rights and privacy, and support the role of encryption in protecting those rights” and even acknowledge that “encryption is vital to the digital economy and a secure cyberspace, and to the protection of personal, commercial and government information”

However, they say the increasing use and sophistication of certain encryption designs “present challenges for nations in combatting serious crimes and threats to national and global security”.

The statement notes that many of the same means of encryption that are being used to protect personal, commercial and government information are also being used by criminals, including child sex offenders, terrorists and organised crime groups to frustrate investigations and avoid detection and prosecution.

“Privacy laws must prevent arbitrary or unlawful interference, but privacy is not absolute. It is an established principle that appropriate government authorities should be able to seek access to otherwise private information when a court or independent authority has authorised such access based on established legal standards,” the statement said, adding that the same principles have long permitted government authorities to search homes, vehicles, and personal effects with valid legal authority.

According to the Five Eyes governments, the increasing gap between the ability of law enforcement to lawfully access data and their ability to acquire and use the content of that data is “a pressing international concern” that requires “urgent, sustained attention and informed discussion”.

Otherwise, the statement said, court decisions about legitimate access to data are increasingly “rendered meaningless”, threatening to undermine the systems of justice. Each of the Five Eyes countries will consider how best to ensure access to encrypted products. The options include voluntary cooperation of industry partners or legislation.

Any response, the statement said, will adhere to requirements for “proper authorisation and oversight”, and to the “traditional requirements” that access to information is underpinned by.

“We recognise that, in giving effect to these principles, governments may have need to engage with a range of stakeholders, consistent with their domestic environment and legal frameworks,” the statement said.

In a joint statement on countering the illicit use of online spaces, the Five Eyes alliance partners said they were united in their commitment to protect their citizens from child predators, terrorists, violent extremists and other illicit actors.