Feeds

Skype crypto stumps German cops

Police boss attempts to justify Trojan plan

The Power of One eBook: Top reasons to choose HP BladeSystem

German police have expressed frustration about their inability to decipher the encryption used by Skype in order to tap into the VoIP calls of suspected terrorists.

Lawful interception (or wiretapping) of telephone calls has happened since before the time of rotary phones. In many countries, telecos must promise to allow wiretapping to be granted a license. VoIP services provided by software firms independent of ISPs complicate this picture.

"The encryption with Skype telephone software... creates grave difficulties for us," said Joerg Ziercke, president of Germany's Federal Police Office (BKA) at an annual gathering of security and law enforcement officials. "We can't decipher it. That's why we're talking about source telecommunication surveillance - that is, getting to the source before encryption or after it's been decrypted."

Ziercke's comments are an attempt to justify controversial German plans, yet to be legally approved, to develop "remote forensic software" (AKA a law enforcement Trojan). Proposals to give explicit permission for law enforcement officials to plant malware stem from a Federal Court ruling earlier this year declaring clandestine searches of suspects' computers to be inadmissible as evidence, pending a law regulating the practice.

The idea of a law enforcement Trojan has sparked a fierce civil liberties debate, as well as objections from the IT security community. German police are reportedly looking to hire two "specialists" to develop "white hat" malware. Ziercke's comments provide an insight into the sort of capabilities, such as capturing the raw output of microphones on compromised PCs, that these law enforcement Trojans ought to have.

Ziercke told reporters that it was not asking Skype to divulge its encryption keys or leave "back doors open" for law enforcement authorities, arguing that such requests would leave the eBay-owned VoIP firm at a competitive disadvantage to other services. "There are no discussions with Skype. I don't think that would help. I don't think that any provider would go for that," he said.

Designing a Defense for Mobile Applications

Next page: Uncrackable Skype?

More from The Register

next story
DARPA-derived secure microkernel goes open source tomorrow
Hacker-repelling, drone-protecting code will soon be yours to tweak as you see fit
How long is too long to wait for a security fix?
Synology finally patches OpenSSL bugs in Trevor's NAS
Don't look, Snowden: Security biz chases Tails with zero-day flaws alert
Exodus vows not to sell secrets of whistleblower's favorite OS
Roll out the welcome mat to hackers and crackers
Security chap pens guide to bug bounty programs that won't fail like Yahoo!'s
HIDDEN packet sniffer spy tech in MILLIONS of iPhones, iPads – expert
Don't panic though – Apple's backdoor is not wide open to all, guru tells us
Researcher sat on critical IE bugs for THREE YEARS
VUPEN waited for Pwn2Own cash while IE's sandbox leaked
Four fake Google haxbots hit YOUR WEBSITE every day
Goog the perfect ruse to slip into SEO orfice
prev story

Whitepapers

Designing a Defense for Mobile Applications
Learn about the various considerations for defending mobile applications - from the application architecture itself to the myriad testing technologies.
Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
Top 8 considerations to enable and simplify mobility
In this whitepaper learn how to successfully add mobile capabilities simply and cost effectively.
Seven Steps to Software Security
Seven practical steps you can begin to take today to secure your applications and prevent the damages a successful cyber-attack can cause.
Boost IT visibility and business value
How building a great service catalog relieves pressure points and demonstrates the value of IT service management.