128
European Police Chiefs call for industry and governments to take action against end-to-end encryption roll-out (www.europol.europa.eu)
submitted 8 months ago by 0x815@feddit.de to c/europe@feddit.de
40 comments fedilink hide all child comments

The Joint Declaration was agreed upon at an informal meeting of the European Chiefs of Police in London hosted by the National Crime Agency on 18 April.

Police Chiefs of all EU Member States and Schengen Associated Countries were invited, alongside Europol’s Executive Director.

Here is the declaration (pdf).

you are viewing a single comment's thread
view the rest of the comments
[-] Mikina@programming.dev 9 points 8 months ago

Once you have a tool that uses pgp with keys you provide, and encrypts messages in normal chats, changing the actuall message format would probably be easy, so there's plenty of room for adittional steganography. Images would make for a perfect cover, with something like last-bit steganography.

But, I hope it won't come to that.

[-] trollercoaster@sh.itjust.works 1 points 8 months ago* (last edited 8 months ago)

They will have tools to scan for steganography. I bet Palantir or some other dodgy tech bro company is more than happy to sell something like that to them. And with PGP's not only strong encryption, but just as strong authentication, they'll have no problem whatsoever proving that it was you who sent those illegal encrypted messages.

[-] Mikina@programming.dev 1 points 8 months ago

That's true. I guess that in this case, your best bet is (assuming you don't have something so illegal to hide, that they do want to expend large amount of resources on you) to just go security by obscurity, and have some kind of obscure custom steganography that's not widely used.

And for PGP - I though that there's a difference between signing and encrypting a message, and when you only encrypt and don't sign, they can't attribute the message to you, assuming they don't have your private key or the original plaintext? Or is it possible to attribute a encrypted message using only public key and cyphertext?

[-] trollercoaster@sh.itjust.works 1 points 8 months ago

Or is it possible to attribute a encrypted message using only public key and cyphertext?

I'm not entirely sure, and was more thinking of the standard application of PGP where encryption and signing go hand in hand.

this post was submitted on 22 Apr 2024
128 points (98.5% liked)

Europe

8326 readers
2 users here now

News/Interesting Stories/Beautiful Pictures from Europe 🇪🇺

(Current banner: Thunder mountain, Germany, 🇩🇪 ) Feel free to post submissions for banner pictures

Rules

(This list is obviously incomplete, but it will get expanded when necessary)

  1. Be nice to each other (e.g. No direct insults against each other);
  2. No racism, antisemitism, dehumanisation of minorities or glorification of National Socialism allowed;
  3. No posts linking to mis-information funded by foreign states or billionaires.

Also check out !yurop@lemm.ee

founded 2 years ago
MODERATORS
poVoq@slrpnk.net