crypto stamping scanned documents/WP files and court?

Peter Sommer hcorn at cix.co.uk
Thu, 07 Nov 2002 08:27:55 +0000


MD5 or similar hashing is routinely used in forensic disk imaging to show 
that a clone of a disk is accurate;  hashing is also routinely used to 
demonstrate that two paedophile pictures are identical (indeed it is 
regarded as a powerful intelligence and investigatory tool).  BS document 
PD008 is also widely used in document imaging storage systems (as when 
banks store images of cheques, mortgage documents etc and later want to be 
able to get the courts to accept them even where the original is no longer 
available) - indeed I was part of a team that helped APACS define its 
standards in this area.  But PD0008 is also about procedures as well as 
technology.

When you ask about the view the Courts might take - the answer is that all 
these matters are usually issues for the finding of fact, rather than areas 
where if you follow a particular procedure the courts are compelled to 
accept the result.  But I would expect MD5 etc hashing,  properly 
deployed,  to have very strong probative value.





At 13:38 06/11/2002 +0000, Adian Midgely wrote  wrote:
>My impression is that if someone shows me a file which is an image of a
>letter, scanned in or is a plain word processor file, database file or
>whatever, and shows me the MD5 digest or SHA hash or some similar result of a
>one way crypto function of it in its current state (I mean lets me derive it
>from a copy) and demonstrtates that  the copy of the file that was deposited
>in the safe of their solicitor (or similar) on a given date 6 months ago
>gives the same MD5 digest/hash ...
>
>But are the Courts inclined to come to the same view of it?
>
>

Peter Sommer
hcorn@cix.co.uk; P.M.Sommer@lse.ac.uk
Academic URL: http://csrc.lse.ac.uk//Sommer.htm
Commercial URL: http://www.pmsommer.com