What is an encryption backdoor?

Rounds are doing the rounds again after speaking back on encrypted services Report has been published UK government Off -end encrypted (E2EE) device backup offer from the end of iCloudThe Officials are reported to have been at Apple to create a “backdoor” in this service that allows state actors to access data on the cleart.

UK technology agencies have since passed a pass and have obvious ability to limit the use of strong encryption 2016 State Surveillance Updates on PowerThe According to reporting Washington PostUK officials have used the Investigation Energy Act (IPA) to demand Apple-for “blanket” data access that is designed to protect its Icloud Advanced Data Protection (ADP) service from third-party access.

Apple’s ADP Service Technical Architecture is designed in such a way that the technology giant does not even contain encryption keys – thanks for using it End -to -end encryption (E2EE) – allowing Apple to promise it has the user’s data “zero knowledge”.

Ay Backdoor A word is usually deployed to describe a secret weakness inserted into the code to block the protection systems to enable third parties. In the iCloud case, the order allows the UK intelligence agent or law enforcement to get access to encrypted data to the users.

Although the UK government has regularly refused or refuses the reports issued under the IPA, security experts have warned that this national secret order May contain worldwide ramy If the iPhone maker is forced to weaken security security, it offers all users in the UK.

Once the weakness appears in the software, there is a risk that it can be absorbed by other types of agents, hackers and other bad actors say that for brutal purposes – such as identity theft, or to sell or sell, or even sell raansomware. Make

This may explain why the main freshing used in the surroundings of state-driven efforts to achieve access to E2E is why this visual abstraction of a backdoor; The asking a Weakness To Deliberately The trade-offs that are added to the code make plain.

To use examples: When it comes to physical doors – buildings, walls or likes – it is never guaranteed that the owner of the property or the key container will use the exclusive of that point of entry.

Once the presence of the opening, it creates the possibility of access – someone can get a copy of the key, for example, or even breaking the door and proceed on their way.

Bottom line: There is no perfect election door that a particular person just lets a particular person go. If someone can enter, it is logically followed that someone else may be able to use the door.

The same access risk policy applies to the weakness associated with software (or, in fact, hardware).

Concept Noisy (“None other than us”) Backdoers are wandering by security services in the past. This specific type of backdoor usually depends on the evaluation of their technical skills that can use a certain weakness higher than everyone else-a obviously more secure backdoor that can only be accessed exclusively by their own agents.

However, by very nature, technology skills and abilities are an immovable fame. It is rarely a proper science to evaluate the technical capabilities of unknown others. The concept of “Nobus” is already sitting on the questionable assumption; Any third -party access creates the risk of opening fresh vectors for the attack, such as social engineering techniques aimed at the person with “approved” access.

Surprisingly, many security experts dismiss Nobas as fundamentally defective ideas. Simply put, no access creates the risk; Therefore, the back pressure is opposed to strong security.

Nevertheless, regardless of this clean and current protection concern, Governments continue to press backwardsThe That’s why we continue to talk about them.

The word “backdoor” also implies that these national requests can be different from the public-exactly such as the point of entrance to the backward face to the back. In Apple’s iCloud case, request to compromise with encryption under the UK IPA – a “technical capacity notification” or TCN – cannot be legally disclosed by the recipient. The purpose of the law is to hide through any backward design. (A process of blocking a TCN details in the press is a process to block the block, but it is important to note that Apple has not yet made any public comments on these reports.)

In accordance with the rights group Electronic Frontier FoundationThe word “backdoor” was used to refer to the secret accounts and/or passwords created to allow someone to allow someone to access unknown in the backdoor (and “trapdoor”) system. However, over the years, the term has been used to label the degradation, degraded or otherwise compromise of data protection capable of encryption.

When the backdors are in the news again, thanks to the UK after the encrypted iCloud backups of Apple, it is important to be aware that data access claims are decades ago.

In the decade of the decade, for example, the US National Security Agency (NSA) created encrypted hardware for processing voice and data messages, which had a backdoor baked – with the aim of allowing preventing security services to interrupt communication. As it was reported, “Clipper Chip” used a system of Key Escrow – which means an encrypt key was created and was stored by government agencies so that the state authorities wanted to facilitate access to the encrypted data on the event.

The NSA attempt to give chips with the baked-in backdoor failed after following the response of security and privacy. However, the clipper chip is given a credit to help the cryptologist’s prizing government to help to develop and spread the strengs and encryption software to secure data against overreach.

The clipper chip is a good example of where the system’s access to mandate was made public. It is noteworthy that the rear side should not always be secret. (In the UK’s iCloud case, state agents obviously wanted Apple users to get access without knowing it))

Add to it, governments often deploy emotive propaganda to access data to access data and/or service suppliers to admit to the public support – such as arguing that E2EE access is required to fight child abuse, Or terrorism, or prevent some other heinous crime.

Although there may be a way to get back to bite their manufacturers in the back. For example, China-backed hacker Federally compulsory wiretap systems were behind the negotiations End -Exquisitely thanks to the 30-year-old Federal Law that made backdoor access to US Telkos and ISPS users, which made backdoor access (though, non-I2 data), deliberately refers to the risk of baking blankets.

The government should also be worried about risk for their own citizens and risk for national protection.

There are many examples that have been suspected to have been suspected to have sheltered the Chinese hardware and software for years. Anxiety over potential backdoor risk anxiety managed some countries, Including the United KingdomIn recent years, it is necessary to take steps to remove or restrict the use of Chinese technology products, such as components used in critical telecom infrastructure. Fear can also be a strong motivation on the back.