Feeds

Encryption tears holes in RIP

Could there be a way to dodge government snooping?

  • alert
  • submit to reddit

Choosing a cloud hosting partner with confidence

A group of cryptographers think they have found a way to defeat the RIP Act, by making it impossible to hand over the keys to encrypted information.

The section of the act that has caused so much controversy in the UK gives the government the right to the plain text of, or key to, enciphered information. However, if a person has used an ephemeral key, they never know what the key is and so cannot pass it on to a third-party, and it is this vulnerability that the group wishes to exploit.

They state that their aim is "to defeat RIP Act Part3 and make it look silly, and to allow UK citizens to communicate and to store information without worrying about it. We are doing this so people can be private elsewhere than in our heads. We object to the idea that people should not be allowed to seek privacy from governments."

Lead by mathematician Peter Fairbrother, M-o-o-t is an amalgamation of encryption specialists and civil liberties campaigners, of whom most have chosen to remain anonymous. They aim to have software ready to ship by June 2001, in time for the "activation" of the RIP Act.

The group plans to ship M-o-o-t on CD. It is an alternative operating system that doesn't use local storage. That way, the group says, if your computer is seized by police, there will be nothing for them to find.

Fairbrother, quoted in IT paper Computer Weakly, said: "It is technically impossible to have an effective law, because of the state of cryptography. RIP says you have to give a key but you can use an ephemeral key - where you never knew what the key was."

He went on: "The thing that amazes me is that the Government is putting in laws that a simple hobby cryptographer can overcome." ®

Related Link

The group has posted its work-to-date online for peer review and discussion. Check it out and let us know what you make of it.

Providing a secure and efficient Helpdesk

More from The Register

next story
Preview redux: Microsoft ships new Windows 10 build with 7,000 changes
Latest bleeding-edge bits borrow Action Center from Windows Phone
Google opens Inbox – email for people too thick to handle email
Print this article out and give it to someone tech-y if you get stuck
Microsoft promises Windows 10 will mean two-factor auth for all
Sneak peek at security features Redmond's baking into new OS
UNIX greybeards threaten Debian fork over systemd plan
'Veteran Unix Admins' fear desktop emphasis is betraying open source
Entity Framework goes 'code first' as Microsoft pulls visual design tool
Visual Studio database diagramming's out the window
Google+ goes TITSUP. But WHO knew? How long? Anyone ... Hello ...
Wobbly Gmail, Contacts, Calendar on the other hand ...
DEATH by PowerPoint: Microsoft warns of 0-day attack hidden in slides
Might put out patch in update, might chuck it out sooner
prev story

Whitepapers

Choosing cloud Backup services
Demystify how you can address your data protection needs in your small- to medium-sized business and select the best online backup service to meet your needs.
Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Storage capacity and performance optimization at Mizuno USA
Mizuno USA turn to Tegile storage technology to solve both their SAN and backup issues.