January 23, 2012 6:46 PM

Ruling could force Americans to decrypt laptops

By
Declan McCullagh
(CNET) 

American citizens can be ordered to decrypt their PGP-scrambled hard drives for police to peruse for incriminating files, a federal judge in Colorado ruled today in what could become a precedent-setting case.

Judge Robert Blackburn ordered a Peyton, Colo. woman to decrypt the hard drive of a Toshiba laptop computer no later than February 21 -- or face the consequences, presumably including contempt of court.

PGP Desktop: Even the FBI can't crack it!

PGP Desktop: Even the FBI can't crack it!

(Credit: Symantec)

Blackburn, a George W. Bush appointee, ruled that the Fifth Amendment posed no barrier to his decryption order. The Fifth Amendment says that nobody man be "compelled in any criminal case to be a witness against himself," which has become known as the right to avoid self-incrimination.

"I find and conclude that the Fifth Amendment is not implicated by requiring production of the unencrypted contents of the Toshiba Satellite M305 laptop computer," Blackburn wrote in a 10-page opinion today. He said the All Writs Act, which dates back to 1789 and has been used to require telephone companies to aid in surveillance, could be invoked in decrypting hard drives as well.

Ramona Fricosu has declined to decrypt a laptop encrypted with Symantec's PGP Desktop that the FBI found in her bedroom during a raid of a home she shared with her mother and children. Fricosu is accused of being involved in a mortgage scam. See CNET's interview last year with her defense attorney, Phil Dubois, who once represented PGP creator Phil Zimmermann. Dubois did not immediately respond to a request for comment this afternoon.t

Blackburn sided with the U.S. Department of Justice, which argued, as CNET reported last summer, that Americans' Fifth Amendment right to remain silent doesn't apply to their encryption passphrases. Federal prosecutors claimed in a brief that:

Public interests will be harmed absent requiring defendants to make available unencrypted contents in circumstances like these. Failing to compel Ms. Fricosu amounts to a concession to her and potential criminals (be it in child exploitation, national security, terrorism, financial crimes or drug trafficking cases) that encrypting all inculpatory digital evidence will serve to defeat the efforts of law enforcement officers to obtain such evidence through judicially authorized search warrants, and thus make their prosecution impossible.

While the U.S. Supreme Court has not confronted the topic, a handful of lower courts have.

In March 2010, a federal judge in Michigan ruled that Thomas Kirschner, facing charges of receiving child pornography, would not have to give up his password. That's "protecting his invocation of his Fifth Amendment privilege against compelled self-incrimination," the court ruled (PDF).

A year earlier, a Vermont federal judge concluded that Sebastien Boucher, who a border guard claims had child porn on his Alienware laptop, did not have a Fifth Amendment right to keep the files encrypted. Boucher eventually complied and was convicted.

Prosecutors in this case have stressed that they don't actually require the passphrase itself, and today's order appears to permit Fricosu to type it in and unlock the files without anyone looking over her shoulder. They say they want only the decrypted data and are not demanding "the password to the drive, either orally or in written form."

Because this involves a Fifth Amendment claim, Colorado prosecutors took the unusual step of seeking approval from headquarters in Washington, D.C.: On May 5, Assistant Attorney General Lanny Breuer sent a letter to Colorado U.S. Attorney John Walsh saying "I hereby approve your request."

The question of whether a criminal defendant can be legally compelled to cough up his encryption passphrase remains an unsettled one, with law review articles for at least the last 15 years arguing the merits of either approach. (A U.S. Justice Department attorney wrote an article in 1996, for instance, titled "Compelled Production of Plaintext and Keys.")

Much of the discussion has been about what analogy comes closest. Prosecutors tend to view PGP passphrases as akin to someone possessing a key to a safe filled with incriminating documents. That person can, in general, be legally compelled to hand over the key. Other examples include the U.S. Supreme Court saying that defendants can be forced to provide fingerprints, blood samples, or voice recordings.

On the other hand are civil libertarians citing other Supreme Court cases that conclude Americans can't be forced to give "compelled testimonial communications" and extending the legal shield of the Fifth Amendment to encryption passphrases. Courts already have ruled that that such protection extends to the contents of a defendant's minds, the argument goes, so why shouldn't a passphrase be shielded as well?

Fricosu was born in 1974 and living in Peyton, Colorado as of 2010. She was charged with bank fraud, wire fraud, and money laundering as part of an alleged attempt to use falsified court documents to illegally gain title to homes near Colorado Springs that were facing "imminent foreclosure" or whose owners were relocating outside the state. Some of the charges could yield up to 30 years in prison; she pleaded not guilty. Her husband, Scott Whatcott, was also charged.

© 2012 CBS Interactive Inc.. All Rights Reserved.
Add a Comment See all 16 Comments
by MitinMontana January 25, 2012 4:28 AM EST
I think I heard Orwell roll in his grave.

Since Joe Biden said and confirmed by the White House that the Taliban are NOT an Enemy of the USA even after RPG'ing the Seal Team 6 Helicopter.
Both the CIA and Hillary admit the Al Qaeda are a Creation of the CIA. And Obomba supported them in Libya as the Al Qaeda Flags are flying all over Libya now. These were the SAME Al Qaeda from Iraq that killed US Troops then went to Libya and then bused to meet with US Special Forces on Syria's Border.

Now since the US will NOT define WHO or Enemies are, WE are now the Enemy as Obomba signed the NDAA he should have turned himself in for supporting the Al Qaeda and bringing the Muslim Brotherhood to power in Egypt under Democracy. ya right.

They should release Manning so he can get the sex change he wanted as he told that traitor that turned him in for exposing the PentaCON'S WAR CRIMES.

Welcome to Am3rika baby...
Reply to this comment
by ralphing January 24, 2012 8:31 PM EST
It is very easy to setup Truecrypt to hide and encrypt your files without installing the software on the computer and leaving no evidence that there are hidden files on the system.
Reply to this comment
by Sloughfoot January 24, 2012 2:09 PM EST
I hope she stands firm and the ACLU rushes to her assistance. I hate crooks but I hate those who would rob us of our Constitutional rights even more. The latter can enslave a nation and make the populous subservient to a dogmatic power.
Reply to this comment
by foo8259 January 24, 2012 6:57 AM EST
Anyway isn't there free, one Click, HD destruct it All software? Else just Google "Thermite my Hard Drive/Laptop"
Reply to this comment
by scottyusa123 January 24, 2012 10:16 AM EST
They would just get you for tamering with evudence. You cannot win.
by jsf14 January 24, 2012 5:10 AM EST
Buried in the article is the info that there was a search warrant. If the data had been in a locked file cabinet, that warrant would have required her to give the keys to those who had the warrant. What's the difference here?
Reply to this comment
by LibertyIsDying January 24, 2012 3:05 PM EST
The difference is simple, A key is a physical object while your passphrase is contained in your mind. If in the case of a key you don't give it up they just break the lock, they are just mad that no one but the NSA can decrypt the data and they don't do work for silly courts outside of National Security cases.

Everyone has a right to privacy and if this woman filed false documents with a court then why not just use her false fillings against her and get your conviction. I for one will never give up a passphrase no matter what some alcoholic judge says, I would have told him to kiss my butt if he rulled that way.
by Scimajor January 24, 2012 1:09 AM EST
LOL, out come the Republicans blaming the Democrats for yet something else. You guys crack me up. You know as well as I do that this will never hold up to the scrutiny of the Supreme Court. It's a non-story about a foolish judgment from an obviously technically illiterate judge.
Reply to this comment
by lonestar9000 January 24, 2012 12:42 AM EST
This really isn't that big a jump. Most judges have always maintained that the 5th Amendment protects only oral and written material, i.e., forced confessions.
Reply to this comment
by berlinfoto-2009 January 24, 2012 6:02 AM EST
It is like "What part of, No, do you not understand", "This really isn't that big a jump", or when a woman says that she is a "little bit Pregnant".
No steps, no further steps in intruding into the privacy of out lives!
In fact this Express train of oppression needs to be put in reverse, we need to move backwards in time to having more rights to privacy, and more civil rights and freedoms.
What kind of un-American whiner are you, any way.
by ToolMangler1 January 23, 2012 11:02 PM EST
I thought that a "Court ordered Subpoena" could force decryption of passworded files!!!! It allows for the opening of 'safe-deposit boxes, Property searches, Banking and Tax information, and other things, so why not. Enlighten me..
Reply to this comment
by mecanik-2009 January 23, 2012 9:21 PM EST
One by one the Democrats are giving away the rights of Americans.
Reply to this comment
by ToolMangler1 January 23, 2012 10:24 PM EST
Not as fast as the GOP/TEA PARTY is giving away "THE NATION". Before long, we will have more rights than we have "Ground to stand on"..
by pwgrant January 23, 2012 11:12 PM EST
Review the article. The judge that ordered is a Bush appointee -a republican. The TSA is also a republican brainchild, gitmo, and the list goes on.

------
Judge Robert Blackburn ordered a Peyton, Colo. woman to decrypt the hard drive of a Toshiba laptop computer no later than February 21 -- or face the consequences, presumably including contempt of court.

PGP Desktop: Even the FBI can't crack it! (Credit: Symantec)
Blackburn, a George W. Bush appointee, ruled that the Fifth Amendment posed no barrier to his decryption order. The Fifth Amendment says that nobody man be "compelled in any criminal case to be a witness against himself," which has become known as the right to avoid self-incrimination.
See all 16 Comments
.
Scroll Left
Scroll Right More »
CBS News on Facebook