The interesting thing is that the "don't carry the data" scenario of wiping your phone and restoring it after you're across the border is not functionally different from the "just don't carry the keys across the border" scenario. I would be comfortable with a dd archive of my encrypted phone contents in an short-lived S3 bucket that I could restore with a simple passphrase-derived key, for example. It's hard for the law to recognize that they haven't achieved anything useful by forcing me to do that instead of just lose the key.
One thing this case makes me wonder is if the government would have a problem with someone walking across the border with a completely virgin phone. They must have wiped it, right? Would they try to prosecute? How could they possibly know the defendant in this case actually had anything on his phone before the duress code was entered?
One thing this case makes me wonder is if the government would have a problem with someone walking across the border with a completely virgin phone. They must have wiped it, right? Would they try to prosecute? How could they possibly know the defendant in this case actually had anything on his phone before the duress code was entered?