Re:Forcing suspects to reveal phone passwords is unconstitut...
by wpietri on Monday September 28, 2015 @04:55PM
(#10293133)
Good point. If the phone OS supports encryption and allows this sort of auto-destruction of keys, then that's a lot better.
What we were discussing is abakker's proposal for something that "wipes the phone", and I think my comments are still relevant to that approach.
Of course, a suddenly unreadable phone is still suspicious, but if your plan were perfectly implemented, it might be impossible to prove obstruction of justice.
No, there's no need for anything that complicated.
In principle, encrypting all data on a phone is really simple to implement. In practice, it's carefully thought out to avoid edge cases. The general idea is something like this:
To quickly erase all data on the phone, all that's necessary is to overwrite the key in the special location with random data. From that point on, there is no feasible way to recover anything on the phone. Period.It isn't necessary to erase an entire device. It's merely necessary to replace a 32-byte field (that contains the true AES key) with 32-bytes of random data.
From then on, it doesn't matter what the PIN is. Data on the phone is jibberish unless and until the proper 256-bit AES key is produced. That key no long exists, so from that point on the only way to recover the data is by brute forcing AES, by trying all possible 2^256 combinations.
They look like you had a bunch of things and then erased them
No, what remains is indistinguishable from the case where the correct PIN hasn't been provided. Having "things" on the phone is no evidence of guilt. There is absolutely no evidence that the phone was erased. All that is known is that the provided PIN isn't able to decrypt the data.