Questions tagged [cryptography]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
1
vote
4answers
269 views

Can a one-time-pad provide legal immunity - (make data inadmissible) -?

IMPORTANT NOTE: This question is quite niche, I am not sure if this stack is the most relevant place, please inform me if there is a better place for it. To explain the question: I am asking if, a ...
2
votes
1answer
73 views

Do Bitcoin nodes need consent to store EU citizen's personal data?

The Bitcoin blockchain stores data about bitcoin users. This includes: There bitcoin address, which is linkable to their identity via blockchain analysis Transactions they have made This would seem ...
1
vote
2answers
174 views

Can this scheme be used to avoid forced disclosure?

Summary: Possible way to avoid the requirements of giving away the decryption key. Will this work? Many countries have laws forcing citizens to decrypt their private data if they are being suspected ...
1
vote
1answer
91 views

Is exporting software with cryptographic functions legal in the United Kingdom?

IANAL (I am not a lawyer). I am a programmer and I want to make software with OpenSSL functions or even my own implementation of cryptographic algorithms, such as MD5. However, I am worried that I ...
0
votes
1answer
57 views

Questions about cryptography implementations

I would like to know if implementing a hash function (such as MD5, SHA1 or SHA256) is legal. Is it legal in the UK to implement a hash function and release it? (I know there's Regulation of ...
3
votes
0answers
70 views

Open source crypto project wallet and its liability

I'm working on a crypto wallet for a top 50 cryptocurrency. I'm part of the core team and we were discussing potential liability around the app we're building. It's released as-is and under a BSD-2 ...
1
vote
0answers
247 views

US export compliance document for ios

We are planning to update our app in App Store with some cryptographic implementations included in the next release. Reading about the App Store procedures for apps with any cryptography, it requires ...
3
votes
1answer
188 views

Using hash functions to bypass Cold War-era crypto export restrictions

During the Cold War and up until late 1992, export restrictions prevented the distribution of strong cryptographically secure ciphers. These export restrictions required that all symmetric ciphers be ...
5
votes
2answers
608 views

GDPR (General Data Protection Regulation) - crypto-shredding or regular delete?

The introduction of the GDPR (General Data Protection Regulation) in May 2018 for all businesses targeting EU citizens raises questions regarding the Art. 17 right to erasure, also known as the right ...
4
votes
1answer
287 views

Exploiting a bug in bitcoin is unethical, but is it illegal?

As the title says, if lets say i found a bug in bitcoin or any other cryptocurrency that allows me to create as many coins as i want, what are the legal implications in jurisdictions like: USA ...
2
votes
1answer
623 views

Android app cryptography does it fall under US Export laws?

Basically, I want to encrypt some strings in my app, strings like access tokens or passwords. I planned on using AES, and mainly saw a good library at https://github.com/tozny/java-aes-crypto. Note ...
2
votes
1answer
377 views

Is it legal to create a fake google certificate and distribute it en masse?

The question is exactly what the title says. I am a student attending a rather large high school in South Carolina. In order to block to youtube, proxies, games, etc., the school has disabled SSL and ...
2
votes
1answer
454 views

What if a DAO (decentralized autonomous organization) breaks the law?

A DAO is a decentralized organization, typically powered by cryptography. It works much like a business, but without borders. Although a DAO typically receives instructions from its stockholders, it ...
0
votes
1answer
164 views

Would the government have to prove that the information was unintelligible for them to use the “Compliance with Court Orders Act of 2016”?

The U.S. congress has a draft for a bill that would require companies to fetch information from a device when requested by a court. A consequence of this is that many types of security technology ...
53
votes
3answers
36k views

Would open source programs that use encryption be illegal under this draft of the “Compliance with Court Orders Act of 2016”

The U.S. congress has a draft for a bill that would require companies to fetch information from a device when requested by a court. A consequence of this is that many types of security technology ...
1
vote
4answers
305 views

Could the USA order Apple to unlock a phone under the Defense Production Act?

The Defense Production Act reads in part: The President is authorized (1) to require that performance under contracts or orders (other than contracts of employment) which he deems necessary or ...
3
votes
1answer
162 views

Would an encryption ban also ban transmitting random noise?

Say for the sake of argument that the US government decided to ban all encryption in communications. Since modern encryption makes a message practically indistinguishable from random noise, would ...
1
vote
1answer
95 views

How can the blockchain act as legal title?

Do any legal opinions exist on the status of onchain tokens backed by offchain assets? What case law / analogous examples are there to support blockchain proof of title. Are any legal scholars ...
10
votes
1answer
748 views

Is it legal to export open-source cryptographic software from Canada

I'm an independent software developer who has developed a program that links to the OpenSSL libraries for the purpose of allowing users to decrypt, filter and re-encrypt secure content. For example, ...
2
votes
1answer
157 views

Can I self-classify my app for mass market encryption if I let the user choose the encryption scheme?

I am trying to get a mobile app published in the App Store. The app makes use of several standard encryption schemes (such as AES, Twofish, Serpent) provided by statically-linked OpenSSL and Crypto++ ...
3
votes
2answers
438 views

(Cryptography) - Sending Encrypted Messages Online

Is it legal to send encrypted messages (specifically using RSA key-pairs and AES 256) online in Canada and the USA? Also, can law enforcement request it to be decrypted without probable cause? PS. ...
3
votes
1answer
204 views

Is crypto legal in a weapon-free zone?

To expand on Is the right to keep and bear crypto protected by the Second Amendment?, since in the U. S. of A. crypto is considered munition (Bernstein v. United States http://export.cr.yp.to/), is it ...
4
votes
2answers
2k views

What exactly makes encryption a weapon?

As a followup from Is the right to keep and bear crypto protected by the Second Amendment?, for export control purposes, United States has been classifying crypto as munition. In the old days, maybe ...
14
votes
3answers
1k views

Is the right to keep and bear crypto protected by the Second Amendment?

Stumbled across an interesting comment in regards to the recent events about TorProject and a public library in Lebanon, New Hampshire, U. S. of A.: http://www.dslreports.com/forum/r30291606-So-let-...