Microsoft handed over government encryption keys to customer data

The FBI went to Microsoft last year with a warrant, asking them to turn over the keys to unlock encrypted data stored on three laptops as part of an investigation into potential fraud involving Guam’s coronavirus unemployment assistance program. Microsoft complied.

Typically, companies resist handing over encryption keys to authorities. most famous, Apple refused To give the FBI access to the phone used by the San Bernardino attackers in 2016. The FBI eventually found a third party to hack the phone, but in the end withdraw I made it up. Most major technology companies, incl Google and Facebook She supported Apple in its fight with the FBI. Even Microsoft supported Tim Cook’s position, if only a little With less force From others.

However, in this case, it seems that Microsoft decided to give in to the government’s demands and confirmed it Forbes It “provides BitLocker recovery keys if it receives a valid legal order.” Microsoft spokesman Charles Chamberlain said Edge Microsoft is legally required to produce the keys stored on its servers.

“Customers can choose to store their encryption keys locally, in a location that Microsoft cannot access, or in the Microsoft cloud,” Chamberlain explained. “We realize that some customers prefer Microsoft cloud storage so we can help recover their encryption key if necessary. While key recovery provides convenience, it also carries the risk of unwanted access.”

Senator Ron Wyden of Oregon responded: Forbes It is “irresponsible” for companies to “secretly hand over users’ encryption keys.”

What concerns privacy advocates like the ACLU is the precedent this sets and the potential for abuse. The current administration and Ice They showed little respect to Data security or Rule of law. And outside American borders, said Jennifer Granik, surveillance and cybersecurity counsel at the American Civil Liberties Union Forbes That “foreign governments with questionable human rights records” may also expect Microsoft to hand over keys to customer data.