To the extend that I've read, they can demand that they hand over data/documents that they know exist, regardless of whether they're encrypted. It's akin to being forced to open a safe if they have a search warrant for a specific document.

What they can't do is say "decrypt this blob and let us look around".