Slashdot Mirror


Verizon "End-to-End" Encrypted Calling Includes Law Enforcement Backdoor

An anonymous reader sends this quote from TechDirt: As a string of whistle blowers like former AT&T employee Mark Klein have made clear abundantly clear, the line purportedly separating intelligence operations from the nation's incumbent phone companies was all-but obliterated long ago. As such, it's relatively amusing to see Verizon announce this week that the company is offering up a new encrypted wireless voice service named Voice Cypher. Voice Cypher, Verizon states, offers "end-to-end" encryption for voice calls on iOS, Android, or BlackBerry devices equipped with a special app made by Cellcrypt.

Verizon says it's initially pitching the $45 per phone service to government agencies and corporations, but would ultimately love to offer it to consumers as a line item on your bill. Of course by "end-to-end encryption," Verizon means that the new $45 per phone service includes an embedded NSA backdoor free of charge. Apparently, in Verizon-land, "end-to-end encryption" means something entirely different than it does in the real world.

40 of 170 comments (clear)

  1. Depends... by TWX · · Score: 5, Funny

    ...on which 'end' they're backdooring you in apparently.

    --
    Do not look into laser with remaining eye.
    1. Re:Depends... by schnell · · Score: 4, Informative

      Nobody is being "backdoored" here except as required by law. The linked story summary is a troll for mentioning the NSA - it has nothing to do with them, but either the writer doesn't know what they're talking about or they just figured that would get more clicks.

      Telecom providers are required to make sure that any voice service they sell is compliant with CALEA. There is no direct CALEA equivalent today for data services, interestingly - this is how far behind the times the Feds can be. And yes everything in LTE is data but for the purposes of the law, anything where you are talking - for example VoIP - is considered a voice service.

      CALEA basically means that if you (the telecom) get a wiretap order - signed by a judge - from a law enforcement agency, you need to wiretap and record that user's calls for the specified time period, decrypt them if necessary, and then turn them over to the law enforcement agency. Verizon had to make this service CALEA compliant, or they couldn't have offered it. And remember that CALEA is not about mass wireless surveillance a la NSA but is actually about targeted recordings of specific individuals where there is probable cause enough to get a judge to sign off on the wiretap order. Very different things. You can dislike CALEA but you can't blame Verizon for putting in some magical backdoor - that has absolutely zero to do with the NSA - which they are required by law to have.

      However for the privacy-minded it should be noted that the way things work, CALEA only applies to telecom providers. If you bought the same software from a non-telecom source (e.g. the software OEM themselves) and put it on your phone, then CALEA won't help law enforcement because Verizon wouldn't have the key to decrypt your calls with and could only turn over the encrypted stream. So if you are worried about being wiretapped by the police, don't buy your encryption service from your phone company.

      --
      "95% of all Slashdot .sig quotes are incorrect or completely fabricated." -Benjamin Franklin
    2. Re:Depends... by Kvathe · · Score: 5, Informative

      From TFA:

      "...the legislation known as the Communications Assistance for Law Enforcement Act requires phone carriers to decrypt communications for the government only if they have designed their technology to make it possible to do so. If Verizon and Cellcrypt had structured their encryption so that neither company had the information necessary to decrypt the calls, they would not have been breaking the law."

    3. Re:Depends... by Livius · · Score: 3, Insightful

      Nobody is being "backdoored" here except as required by law.

      An unconstitutional law is actually not a law at all.

    4. Re:Depends... by jeffmeden · · Score: 2

      My kingdom for a modpoint! This whole submission is a troll right down to the last line, "Apparently, in Verizon-land, "end-to-end encryption" means something entirely different than it does in the real world." Thinking that a large, federally regulated business is going to push a system without a central keystore (what they meant to jab at instead of the "end-to-end" nature) is laughable. Trying to make Verizon out as the bad guy over this is just taking away time that could be spent making them out as the bad guy over legitimate moral shortcomings. But, trolls will be trolls.

    5. Re:Depends... by fyngyrz · · Score: 2

      Further, the presumption that because it falls under the umbrella of law, it is somehow made "ok", is utter nonsense from word one.

      --
      I've fallen off your lawn, and I can't get up.
    6. Re:Depends... by jeffmeden · · Score: 3, Informative

      From TFA:

      "...the legislation known as the Communications Assistance for Law Enforcement Act requires phone carriers to decrypt communications for the government only if they have designed their technology to make it possible to do so. If Verizon and Cellcrypt had structured their encryption so that neither company had the information necessary to decrypt the calls, they would not have been breaking the law."

      TFA is a plain ol' troll. CALEA indeed requires any switching systems used for voice traffic (land lines and cell phones) to allow for electronic eavesdropping of all calls going through them. The only caveat is that replacing/upgrading every switching system is completely impractical, even in decades-long time frames, so the FCC has been granting extensions for non-compliance. If Verizon went to the FCC saying that they were going to put software in that started to roll back CALEA compliance from any call that happened to be made using a pair of their cellphones running their provided encryption software, they would have thrown the book at them. New systems *do* have to be CALEA compliant.

    7. Re:Depends... by schnell · · Score: 4, Informative

      An unconstitutional law is actually not a law at all.

      What's unconstitutional about CALEA? It requires police to show probable cause and have a judge sign off on a request, just as if it were a warrant for arrest or any other search and seizure of personal records. Whether it does so in practice is a different question, but in theory the law itself is at least designed to be fully compatible with the Fourth Amendment.

      NSA warrantless wiretapping? Almost certainly unconstitutional, by any reading other than Dick Cheney's. CALEA? Probably not so much.

      And BTW an unconstitutional law is still a law. Not sure where you learned your legal theory. A law that's unconstitutional should in theory be overturned by the courts so that it's not a law anymore - that's how "checks and balances" work - but until such time, it is most definitely a law and entirely enforceable!

      --
      "95% of all Slashdot .sig quotes are incorrect or completely fabricated." -Benjamin Franklin
    8. Re:Depends... by sjames · · Score: 2

      But they DIDN'T have to falsely advertise it as end-to-end encryption when it clearly is not.

    9. Re:Depends... by sjames · · Score: 3, Interesting

      I would say that advertising the 'service' as end to end when it isn't even legal for it to actually be end to end is a legitimate moral shortcoming.

    10. Re:Depends... by bickerdyke · · Score: 2

      Telecom providers are required to make sure that any voice service they sell is compliant with CALEA

      In that case, CALEA would effectively render end-to-end encryption illegal. So, IMHO, they should be hunted down by lawyers for either not complying with CELEA or for not offering what they advertise.

      And remember that CALEA is not about mass wireless surveillance a la NSA but is actually about targeted recordings of specific individuals where there is probable cause enough to get a judge to sign off on the wiretap order. Very different things.

      Indeed. But there's nothing that keeps the NSA from using the same interface, too. either by serving wiretap orders themselfs (decorated with a nice gag order) or by targetting the CELEA equipment.

      --
      bickerdyke
    11. Re: Depends... by Anonymous Coward · · Score: 2, Interesting

      Not a troll. They advertise it as end to end and it is not.

    12. Re:Depends... by codewarren · · Score: 2

      This has never been about whether the current U.S. government is trustworthy, but whether the future U.S. government is, and no one can ensure that. Would you trust promises from the Chinese government to always get warrants, or trust the quality of the warrants if they did? Governments are made from people and the people change. You may trust the U.S. government now, but you should not trust the U.S. government of the future further than necessary.

    13. Re:Depends... by Archangel+Michael · · Score: 2

      From what little I know, the NSA doesn't actually spy on US citizens en mass. Instead, it has contracted other extra-national agencies to do it, specifically to get around the letter of the law. These are quid pro quo arraignments with agencies like Britain's MI6. We monitor them, they monitor us, and we exchange data.

      So technically, they don't spy on us, but the result is the same.

      --
      Agent K: A *person* is smart. People are dumb, stupid, panicky animals, and you know it.
  2. computer with a phone add-on by roman_mir · · Score: 2

    People are running around with computers in their hands, the phone is now nothing but an add-on feature, as such we should be able to have a real p2p encrypted channel with communications over it, so for people with data plans this shouldn't be a problem. I am more interested seeing if we can have a system that uses voice to send encrypted data over it...

    1. Re:computer with a phone add-on by Anonymous Coward · · Score: 3, Funny

      Perhaps if we could figure out some way to "modulate" encrypted digital data into sounds, and then "demodulate" the sounds into data on the other end, we might have something on our hands.

  3. This should be free by Karmashock · · Score: 4, Insightful

    Aren't our calls supposed to be encrypted anyway? I mean, so some jack ass with a radio can't listen to them? So what are they charging me for here?

    Sounds like a reasonable product for the government.

    For the consumer though, you have to ask yourself what you're actually getting with this? Doesn't appear to be anything. After all, the only people that could normally break into your communications would be the government anyway.

    --
    I've decided to stop wasting my time responding to AC trolls/sockpuppets... so if you want a response from me... login.
    1. Re:This should be free by khellendros1984 · · Score: 2

      I know that for most GSM calls, there are a few stream ciphers in common use, and most or all of them can be cracked in realtime. That just covers the connection between your phone and a cell tower, anyhow. It's meant to protect you from eavesdropping, and not much more.

      --
      It is pitch black. You are likely to be eaten by a grue.
    2. Re:This should be free by dunkindave · · Score: 4, Informative

      Aren't our calls supposed to be encrypted anyway? I mean, so some jack ass with a radio can't listen to them?

      Cellular communications are encrypted between the handset and the tower to prevent the radio buff from listening in. How effective that encryption is is up for debate. This means any end-to-end encryption would actually be double encrypting the data as it passed between handsets and towers, once for the cellular signal, and once for the end-to-end system.

      Apparently, in Verizon-land, "end-to-end encryption" means something entirely different than it does in the real world.

      Also I believe the summary is misleading. This probably is an end-to-end encryption system, meaning the call is encrypted at one handset and the encrypted data travels to the other handset before being decrypted for the purpose of the call. If there is a backdoor that compromises the encryption key, that doesn't change that the system is end-to-end encrypted, just that a snooper would be able to decrypt the traffic.

    3. Re:This should be free by Karmashock · · Score: 2

      if the keys aren't private then it is hard to claim the encryption is worth anything..

      --
      I've decided to stop wasting my time responding to AC trolls/sockpuppets... so if you want a response from me... login.
    4. Re:This should be free by blueg3 · · Score: 4, Informative

      The issuer generally doesn't have a copy of your private key. You make a public-private keypair, put the public key into a certificate request, send the request to a CA, and the CA generates a signed certificate from it that includes the public key. The private key is not seen by the CA at any point.

      You of course *could* have the CA generate both parts and then send you both the public and private key, but that's not nearly as good a solution and is much less common. Most of the CAs I've seen that provide "easy to use" interfaces generate the keypair in the Web browser so that the private key doesn't have to be transmitted.

    5. Re:This should be free by Karmashock · · Score: 2

      We've been watching the evidence of their issues for several years now as one holder of CA licenses after another gets compromised and fucks everyone over in the process.

      Only two entities should have the keys. The source and the destination. And there is even an argument for having more tightly regimented systems then that.

      What you're basically saying is "are you implying that our widely used encryption systems are bad!?"

      Yes... they're trash. I thought everyone here already knew that.

      --
      I've decided to stop wasting my time responding to AC trolls/sockpuppets... so if you want a response from me... login.
    6. Re:This should be free by the_B0fh · · Score: 2

      You do not understand what "end-to-end encryption" means. The end isn't where ever you feel an "end" is. It's the other end that you are communicating with. That's why it's called "end-to-end" and not "end-to-middle" or "end-to-system" or any other variations.

  4. your best value in "open to bad guys" by swschrad · · Score: 2

    as we have pre-selected the best of the bad guys to listen in on all your calls! this handy feature is worth twice the price!

    --
    if this is supposed to be a new economy, how come they still want my old fashioned money?
  5. It's required by LynnwoodRooster · · Score: 2, Informative

    See the CALEA Act passed in 1994. Telecom providers HAVE to provide that backdoor. If not - they are subject to fines of up to $10,000 per day per connection not in compliance, and having their network shut down until it comes into compliance.

    Your indignation should not be directed at Verizon - it should be directed at Washington, DC.

    --
    Browsing at +1 - no ACs, I ignore their posts. So refreshing!
    1. Re:It's required by mythosaz · · Score: 4, Informative

      False.

      CALEA only requires the backdoor to exist if it's technically possible. TFA is pretty clear that other manufacturers and carriers have chosen to implement end-to-end encryption that doesn't have the ability to be backdoored, and as such, there's no need to provide the (non-existent) backdoor to the feds.

    2. Re:It's required by mean+pun · · Score: 4, Insightful

      If you are right, then Verizon should not offer the product, since they can't legally deliver what they promise.

    3. Re:It's required by jc42 · · Score: 5, Insightful

      Your indignation should not be directed at Verizon - it should be directed at Washington, DC.

      A fun part of this is that the government employees at ARPA back in the 1960s explained it all to us. They firmly rejected building any sort of encryption into the network itself, on the grounds that such software would always be controlled by the "middlemen" who supplied the physical connectivity, and they would always build what we now call backdoors into the encryption. They concluded that secure communication between two parties could only be done via encryption that they alone controlled. Any encryption at a lower level was a pure waste of computer time, and shouldn't even be attempted, because it will always be compromised.

      This doesn't seem to have gotten through to many people today, though. We hear a lot about how "the Internet" should supply secure, encrypted connections. Sorry; that's never feasible, unless you own and control access to every piece of hardware along the data's route. And the ARPA guys didn't consider that, because that first 'A' stands for "Army", and they wanted a maximally-redundant, "mesh" type network that would be usable in battle conditions. They went with the approach that you use any kind of data equipment that's available, including the enemy's, and you build in sufficient error detection to ensure that the bits get through undamaged,. Then you use encryption that your team knows how to install on their machines and use. And you probably change the encryption software at irregular intervals.

      Anyway, the real people to direct your anger at are the PR folks in both industry and government, who keep trying to convince you that they can supply encryption that's secure. Yeah, maybe they can do that, but they never have and they never will. And the odd chance that they've actually done so in some specific case doesn't change this. The next (silent, automatic;-) upgrade will introduce the backdoor.

      Unless you have all the code, compile it yourself, and have people who can understand its inner workings, you don't have secure encryption; you have encryption that delivers your text to some unknown third parties. It's the US government's own security folks who explained this to us nearly half a century ago.

      --
      Those who do study history are doomed to stand helplessly by while everyone else repeats it.
    4. Re:It's required by fyngyrz · · Score: 2

      What makes you think the government has a polynomial prime factoring algorithm?

      What makes you think they don't? What makes you think they even need one? What makes you think they don't hire, and utilize, some of the most powerful math-heads out there? What makes you think that something that can't be broken today won't bring you to the vale of tears days, months, even years later, if that's what it takes? What makes you think they don't have, or won't have, some kind of quantum computing device that obviates encryption entirely? What makes you think they didn't log every keystroke you typed, thus making encryption a complete non-issue? Wait, what, your system is "pure"? You know they can tell what you're typing by the sound, right? Finally, what makes you think they won't come right to your home or place of business or your favorite club, hustle you into a dank basement somewhere, and waterboard you or pound your toes to mush with a hammer or actually, eventually, read your mind electronically and get what they want that way? Got any relatives you treasure? What about the recipient(s)? Now there are (at least) two points of human weakness.

      And... you do know that "they" have access to quite a few technologies that "we" do not, right?

      I would seriously bet on the idea that if you demonstrate you think you need to encrypt your stuff by simply doing so, all you've managed to accomplish is get on a list of "we'll get back to this suspicious character later."

      Right now, if you've got something secret that you don't want the government to become aware of, just don't say it or otherwise communicate it. That's your very best chance of actually keeping it a secret. It may be your only chance.

      --
      I've fallen off your lawn, and I can't get up.
    5. Re:It's required by blueg3 · · Score: 3, Informative

      And the ARPA guys didn't consider that, because that first 'A' stands for "Army"

      The "A" stands for "Advanced". I think they were more interested in a research network than a tactical (battlefield) network. I think it's still true that "one organization controls all the infrastructure between two points on the Internet" was *not* the model of the Internet they were envisioning at the time.

  6. Sell the key by jamesl · · Score: 4, Funny

    Verizon sells you end-to-end encryption and then sells NSA the key.

  7. Re:How is this different than the clipper chip? by ogdenk · · Score: 3, Insightful

    Yeah, so they clandestinely compromised your software and network transceivers and near silently passed legislation to make it all retroactively legal tacked onto other bills instead. That'll teach you to stick up for your rights you worthless proletariat.

    Like that bit about Congress deciding parallel construction due to NSA cellphone taps does not violate your 1st, 4th or 5th amendment rights. We all know damn well that those assholes were NOT representing their constituents when they voted on that one. If that passes SCOTUS, basically all is lost and everything just gets worse until it affects rich folks enough that they get pissed off, arm a bunch of people and organize.

    Make no mistake, the current regime (government and large corporate) views you as the enemy. An inconvenience in their way. And the more inconvenient you are, the less they care about breaking any and all laws to see you silenced or discredited. Welcome to Hell folks, it only gets worse from here.

  8. Who are you defending against? by NoKaOi · · Score: 2

    If you think you're defending against the NSA with encryption provided by a big telecom company, you're fooling yourself, even if this policy weren't public. If, on the other hand, you're defending against basic hackers hired by a competitor, then perhaps this would be a reasonable option. It's like locking your doors, putting bars on all your windows, and putting your stuff in a safe. Sure, that'll keep most burglars out, but do you think the NSA wouldn't be able to get to your stuff?

    This is the part that bugs me: "so long as they're able to prove that there's a legitimate law enforcement reason for doing so." It used to be that meant demonstrating to an impartial judge that they had probable cause, which takes the form of a warrant. However, it doesn't say they need a warrant...so now it's a Verizon employee rather than an impartial judge who gets to decide if there's probable cause.

    1. Re:Who are you defending against? by blueg3 · · Score: 2

      1. That's pretty common simply because getting anything approved for encryption above the SBU level is difficult and expensive. (It also requires, in essence, review by and the approval of NSA.) So tons of encryption products are made only up to the SBU level.

      2. Even with end-to-end encryption, it's unlikely that they would approve classified data transiting the Internet.

  9. Re: Actually, not free of charge by Anonymous Coward · · Score: 2, Informative

    Why wouldn't you just install Signal?

    It's free, open-source, and the team is headed by someone respected in the security industry. (Moxie)

    Better yet, with TextSecure integration into Signal -- coming soon to IOS (beta) already available for Android as standalone app -- one's text messages are also protected.

  10. Re: How is this different than the clipper chip? by ogdenk · · Score: 4, Interesting

    It's simple: you can't. They won, let's face it. There's nothing anyone can do.

    Unless they make the same mistake the Nazis did and start persecuting the rich, no one will have the funds or manpower to organize an effective resistance. And due to very effective media manipulation techniques, anyone else who tried to rise would be labelled a lone, kiddie murdering, child molesting, atheist, serial rapist that preys on cute rich white girls.... and boys. And the cops will obviously be in fear for their lives as they shoot you in handcuffs.

    They aren't making the same mistake the Nazis did. This is not race warfare. This is not religious warfare. This is CLASS warfare. And you aren't part of their class but they will never truly admit this to you directly. They'll just have you pulled over for your car being too old, shoot your dog in the backseat, and tell you to stop resisting as they cave your face in with onlookers doing nothing because you dared look them in the eye. And the perpetrators of the violence will investigate and clear themselves. Welcome to 21st century America.

  11. US Corporation... by geekmux · · Score: 2

    ...US Laws.

    'nuff said.

    No, seriously, can we please stop being shocked and appalled over the (ancient) concept that a US Corporation would beholden a US Citizen with any form of communications service that also contains a back door for the US Government? The OMGWTFEFF attitude is wearing thin.

    US Corporation. US Laws. CALEA is twenty years old now. You have no Right to privacy anymore with any US-based communications service.

    Oh, and according to this Administration, you just might be a terrorist if you think or assume otherwise. Have fun.

  12. Marbury v Madison "null and void" by raymorris · · Score: 2

    The Supreme Court says they are null and void, iow not law.
    Thomas Jefferson, Alexander Hamilton, and other founders also expressed this principle.

    "All laws which are repugnant to the Constitution are null and void.â (Marbury vs.Madison, 1803.)

    âoeEvery law consistent with the Constitution will have been made in pursuance of the powers granted by it. Every usurpation or law repugnant to it cannot have been made in pursuance of its powers. The latter will be nugatory and void.â (Thomas Jefferson, Elliot, p. 4:187-88.)

    âoeâ¦the laws of Congress are restricted to a certain sphere, and when they depart from this sphere, they are no longer supreme or binding. In the same manner the states have certain independent power, in which their laws are supreme.â (Alexander Hamilton, Elliot, 2:362.)

    âoeThis Constitution, as to the powers therein granted, is constantly to be the supreme law of the land.⦠It is not the supreme law in the exercise of a power not granted.â (William Davie, Pennsylvania, p. 277.)

    âoeIt will not, I presume, have escaped observation that it expressly confines the supremacy to laws made pursuant to the Constitutionâ (Alexander Hamilton, concerning the supremacy clause The Federalist Papers, #33.)

    âoeThere is no position which depends on clearer principles than that every act of a delegated authority, contrary to the commission under which it is exercised, is void. No legislative act, therefore, contrary to the Constitution, can be valid.â (Alexander Hamilton, The Federalist Papers, #78.)

  13. There is no "law enforcement only" backdoor by Opportunist · · Score: 4, Insightful

    Any backdoor is by definition available to everyone. Some may have a key, the others have lockpicks.

    --
    We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
    1. Re:There is no "law enforcement only" backdoor by codewarren · · Score: 2

      How is this insightful? What does "backdoor" have to do with it then? If anything with keys can be picked, then all encrypted communication is vulnerable and adding a backdoor would just be meaningless.

      All communication has to be decryptable or it isn't communication. (How would one-way communication work? exactly like a write-only memory chip). So someone always has to have a key, but that doesn't always have to be the NSA or government or even Verizon.