Bert-Jaap Koops homepage - research

Ph.D. research

cryptography crime

Cryptography is a necessary tool in the information society. Yet if criminals use it, wiretaps and computer searches will become useless. So, there is a clash of concerns: how to ensure that the police can still catch criminals, while respecting the essential uses of cryptography in information security?

Contents

General overview

In recent years, the crypto controversy is shifting from a national security to a law-enforcement perspective. In my Ph.D. research, I restrict myself to the problems crypto causes to the police. More and more governments are becoming aware of the clash of concerns between information security and law enforcement, yet few governments have been able to make a clear policy. The OECD guidelines for crypto policy provide little guidance. What should be done?

First, one should analyse just what is the problem for the police. Wiretapping and computer searches will be hampered by cryptography, and one should assess what kind of criminals will be involved, and what is the extent of the problem - how many criminal investigations have been hampered by cryptography?.

Then, one should look at the alternatives. There are three main directions to look in. First, the govenment can try and get access to keys before they are used, through key escrow or key recovery systems. Alternatively, they may ask suspects for the key or password afterwards; here, they have to take into account the privilege against self-incrimination. If the government can't access keys at all, they'll have to forget about wiretapping and computer searches, and consider other investigation measures.

Finally, after an analysis of the problem and of the alternatives, one must balance the concerns at stake, and decide upon a policy.

Back to Contents.

Essential reading

Back to Contents.

Recommended reading and links

Back to Contents.

© Bert-Jaap Koops, 1997-1999. All rights reserved.
Last updated on 20 July 1999.

home | help | address | mail | links
research | crypto law survey | publications | personal | amnesty
crypto & crime | key recovery | PKI | research links