RIP FOR INDIVIDUAL RIGHTS?

Ian BROWN I.Brown at cs.ucl.ac.uk
Mon, 13 Mar 2000 16:06:12 +0000


Charles Clarke 'wrote':
>The decryption proposals are not draconian.  What we are saying is that law
>enforcement agencies should be able to understand the contents of material
>that they lawfully obtain, notwithstanding the fact that it has been
>protected with some unbreakable new code.  But that is the limit of our
>ambition.

In which case, a requirement for plaintext rather than keys would suffice.

>Accusations that the Bill reverses the burden of proof are simply wrong.
>This is important.  The burden, and it is a significant one, falls on the
>prosecution to prove, beyond reasonable doubt, that an accused person is, or
>has been, in possession of a key to unlock particular protected data.  There
>are statutory defences for individuals who have lost or forgotten a key.
>These need only to be established on the lower level of proof - the balance
>of probabilities

The burden reversal is not in whether a person has or has had a key, but 
whether they have forgotten/lost it, where a "balance of probabilities" test 
is simply inadequate. It should be for the prosecution to prove beyond 
reasonable doubt that the defendent still has access to it.

>Key escrow is firmly off the agenda.

Not off the agenda of those corporate officers who are beginning to realise 
the implications for them and their companies of the "has or has had" 
requirement. How many of them will simply play safe and escrow all corporate 
keys?

>But questions of what levels of
>security should be deployed are not, largely, matters for primary
>legislation.

They certainly should be part of the cost assessment of the bill. And I most 
definitely trust the cost assessment of someone who has worked on these 
matters at the MoD and NATO for 20 years (Brian Gladman) over the Home 
Office's.

>We are certainly ahead of the game as
>regards updating our laws for the digital age.

Acting differently to other countries, certainly. Ahead of the game -- perhaps 
not. Australia is at least 3 years ahead, more if the UK government is going 
to waste another year going down the wrong path.

>We have examined the issue of rights in its widest sense.  This
>includes the rights of those who do not yet have Internet access, who may
>not know what asymmetric encryption is all about, but who nevertheless have
>the right to live in a society free from crime.

"The rights of the many, not of the few"? Simply invalid in relation to human 
rights legislation.

Ian.