Apple, Whatspp And Google Slam GCHQ Eavesdropping Plans

Apple, Google And WhatsApp Slam GCHQ Eavesdropping Proposals

GCHQ proposals to allow secret government surveillance of encrypted messaging apps would “violate important human rights”, internet giants including Apple, WhatsApp and Google have warned.

Dozens of civil society groups and tech companies have signed an open letter condemning GCHQ’s proposals to create a “ghost protocol” which would allow it to”silently” add a “law enforcement participant” to a group chat or call.

The letter reads: “If implemented, [the proposal] will undermine the authentication process that enables users to verify that they are communicating with the right people, introduce potential unintentional vulnerabilities, and increase risks that communications systems could be abused or misused.”

This poses a threat to “fundamental human rights, including privacy and free expression” as users could no longer trust that they know who is on the other end of their communications, it adds.

The controversial “ghost” proposal was first outlined in an essay by Dr Levy and Mr Robinson, from GCHQ’s National Cyber Security Centre, on security blog Lawfare.

The article intended to set out principles for when the government can be permitted “exceptional access” to people’s encrypted data without undermining “the values we all hold dear”.

Responding to the letter, Dr Levy said he welcomes the response and insisted that the proposals is only “hypothetical” and “starting point for discussion”.

What Is The Ghost Proposal?

Image Credit: Alejandro Escamilla/Unsplash 

Security in most modern messaging apps relies on a technique called “public key cryptography”.

This technique sees devices generate a pair of ‘keys’ – one of them public and the other private – which are essentially two very large, mathematically linked numbers.

The public key is used by a person to send out encrypted messages which can only be unscrambled and read using the intended recipient’s corresponding private key.

GCHQ’s proposed “ghost key” would allow a third party – namely a law enforcement official – who possesses neither key to read a plain-text version of a conversation without the users’ knowledge, according to the letter.

This means that companies such as WhatsApp, or iMessage would need to “surreptitiously inject a new public key into a conversation in response to a government demand,” the letter adds.

It is believed that it would also require these companies to either change their encryption schemes or “mislead users” to prevent them being notified when a government operative has been added to their conversation.

Doing this could introduce security vulnerabilities into the apps which could be exploited by non-state actors for malicious purposes, the letter adds.

What About Human Rights?

Flickr Ella - https://www.flickr.com/photos/cuboctahedron/10839363053/in/photolist-h2ccC8-h1bNLm-j1SZwH-h23YFo-haJFkF-h2AGWG-p4GqeF-h4qSjr-p4Gqb4-iC8paV-h2AvJc-h1cGB4-h4pZhh-h4pTZo-j1Vyq6-haJ8Ur-h4pWas-h4q3TA-j3bJ7o-h1bHvS-oMs3zQ-fhPtDu-finBZq-fiybJG-fhPtwG-kwpkjt-fhPuD3-iaonME-fhPu3U-h4qM3p-h2BAq2-yVM7qK-yVM9DH-yVM78v-fhPw8b-fhPv4o-hvPNwr-fhPvGY-fhzeHt-iaoqpT-fhzfL8-iaoVXG-fhzfcR-iaoMuC-iaoyT7-h2AwAc-fhPvcu-fPp8nC-hvPe31-hvQyZT

Image Credit: Ella/Flickr

Currently, the right to privacy in the UK is protected through Article 8 of the Human Rights Convention, the right to a family and private life, alongside the common law in each of the UK’s jurisdictions.

While Article 8 provides a qualified right, states are supposed to use the least restrictive measures possible when they cut down on our privacy rights.

What is GCHQ’s Response?

Pic is being used to highlight that European Court of Justice has ruled GCHQ has breached human rights and privacy laws in its mass surveillance of private communications

Image Credit: Defence Images/Flickr 

Dr Ian Levy said: “We welcome this response to our request for thoughts on exceptional access to data – for example to stop terrorists. The hypothetical proposal was always intended as a starting point for discussion.

“It is pleasing to see support for the six principles and we welcome feedback on their practical application.

We welcome this response to our request for thoughts on exceptional access to data – for example to stop terrorists. The hypothetical proposal was always intended as a starting point for discussion.

Dr Ian Levy, Technical Director of the National Cyber Security Centre

“We will continue to engage with interested parties and look forward to having an open discussion to reach the best solutions possible.”

Featured Image Credit: Yiran Ding/Unsplash

Help us increase understanding and support for human rights in the UK.

Donate
About the Author

Aaron Walawalkar

News and Digital Editor
Aaron is an NCTJ-accredited multimedia journalist focussing on human rights. His extensive reporting on rough sleeping in east London has been nominated for multiple awards. He has worked for regional and national newspapers and produced illustrations, infographics and videos for humanitarian organisation RedR UK. View all posts by Aaron Walawalkar.
Apple, Google And WhatsApp Slam GCHQ Eavesdropping Proposals
Share this: