European authorities want a backdoor for end-to-end encryption

European measures like the GDPR enhance the digital rights of internet users, and the demonopolization of big data ownership is about to spark technological development inside the EU. But one specific piece of the European agenda is very concerning.

Ylva Johansson, the EU’s Commissioner for Home Affairs, has called for a “technical solution” to provide law enforcement agencies with a backdoor to end-to-end encryption. EU CTC recommends exploring a legal framework that would allow for lawful access without dictating technical solutions to providers and technology companies.

Among the suggestions to have an end-to-end encryption backdoor was a client-side scanning, which would basically mean that all the files would be directed to a database of hashes to check if they contain no forbidden content before they are sent to the receiver.

“Client-side scanning mechanisms will break the fundamental promise that encrypted service providers make to their users: maintaining their rights to digital privacy,” says Daniel Markuson, digital privacy expert at NordVPN.

Another encryption method, known as encryption-at-rest, requires the user’s password or PIN as the encryption key. Every time the user enters the password or PIN, the data on the device is decrypted, and, once the device is locked, it gets encrypted again. If governments asked to give a backdoor to that type of encryption, they would be simply asking for access to all information on the device.

When Windows left the DoublePulsar backdoor implant, it simply invited malicious injections and running DLLs on Windows-powered computers.

“If a backdoor is provided, cybercriminals will not wait long to take advantage of it. Companies that rely on encryption to protect their intellectual property will have no way to do that anymore. Identity thefts will likely increase.

Additionally, activists and journalists who rely on E2EE to protect their lives would be left exposed. Giving away the security and privacy of the masses is simply too big a price to pay. Law enforcement agencies have to find alternative ways to tackle criminals behind encrypted channels,” says Daniel Markuson.

EU authorities do not seem to be opinionated and are starting consultations and discussions over the matter, therefore all the concerns must be raised before the final decisions are being taken.