Privacy advocates always just say screw the feds but come on... if police work becomes effectively impossible, what's the point of having detectives? Is having absolute privacy worth an irreversible increase in unsolved murders/human trafficking/etc.?
Why is it so hard to create a cryptographic solution that would allow E2E that works 99.9% of the time, is resistant to malicious actors, but is breakable with a warrant? Have people really even tried?
For example, consider the following system:
1. E2E decryption keys are encrypted with vendor's device-specific asynchronous key
2. Keys are then stored in write-only non-volatile storage
3. Only way to read key is with expensive hardware that is difficult for civilians to obtain/replicate (scanning electron microscope, etc.)
4. Thus, only way to decrypt key is by a) physically obtaining device, b) using expensive hardware to extract encrypted key(s), c) serving encrypted key along with legal warrant to vendor who would then comply with the law (or not, if it is unlawful)
Wouldn't such a system allow privacy yet also be resistant to attacks?
Why is it so hard to create a cryptographic solution that would allow E2E that works 99.9% of the time, is resistant to malicious actors, but is breakable with a warrant? Have people really even tried?
For example, consider the following system:
1. E2E decryption keys are encrypted with vendor's device-specific asynchronous key
2. Keys are then stored in write-only non-volatile storage
3. Only way to read key is with expensive hardware that is difficult for civilians to obtain/replicate (scanning electron microscope, etc.)
4. Thus, only way to decrypt key is by a) physically obtaining device, b) using expensive hardware to extract encrypted key(s), c) serving encrypted key along with legal warrant to vendor who would then comply with the law (or not, if it is unlawful)
Wouldn't such a system allow privacy yet also be resistant to attacks?