# Encryption **Encryption** is the process of encoding information so that only authorized parties can read it — and it is tracked here not as a technical concept but as a political battleground, because the recurring fight over whether governments should be able to break encryption is one of the clearest cases in the entire knowledge base where the [[Surveillance State]]'s demand for access runs directly into the [[Privacy]] rights the [[Fourth Amendment]] is supposed to protect. Every few years, a new crisis revives the same argument: law enforcement says it is "going dark" because it cannot read encrypted communications; civil liberties advocates say that any backdoor built for the government will be exploited by criminals and hostile states; and the technical community points out that you cannot build a door that only the good guys can walk through. The argument has never been resolved because it is structurally irresolvable — the same mathematics that protects dissidents from authoritarian surveillance protects criminals from democratic law enforcement. ## The technical foundation At its core, encryption uses mathematical algorithms to transform readable data (plaintext) into unreadable data (ciphertext) that can only be reversed with the correct key. Symmetric Encryption uses the same key for both operations; asymmetric (public-key) encryption uses a paired public key (for encryption) and private key (for decryption), which solved the key-distribution problem that had limited cryptography for centuries. End-to-end encryption (E2EE) applies asymmetric principles so that only the communicating parties — not the service provider, not the government, not anyone else — can read the messages. Signal, [[WhatsApp]], and iMessage all use E2EE by default. The strength of modern encryption is mathematical: breaking AES-256 or RSA-2048 by brute force would take longer than the age of the universe with current technology. This is what makes the political fight so sharp. The government cannot break the encryption itself, which means it must either compel the provider to weaken the encryption (a backdoor), compel the user to hand over the key (which raises Fifth Amendment self-incrimination issues), or find an alternative way around it (hacking the device, exploiting implementation flaws, or intercepting data before or after encryption). ## Crypto War I: the Clipper Chip (1993–1996) The first major government attempt to control civilian encryption came from the Clinton administration, which proposed the Clipper Chip in 1993 — a hardware encryption chip for telephones that would use a "key escrow" system. Every chip would have a unique key, a copy of which would be held by the government. If law enforcement obtained a wiretap order, it could retrieve the escrowed key and decrypt the communications. The proposal was fought by a coalition of civil liberties organizations (the [[ACLU]], the [[Electronic Frontier Foundation]]), technology companies, and cryptographers who argued that key escrow was inherently insecure, that the government could not be trusted to safeguard the escrowed keys, and that criminals would simply use non-escrowed encryption. The [[NSA]]'s role in designing the underlying Skipjack algorithm — which was classified, preventing independent security review — deepened the distrust. By 1996, the Clipper Chip was effectively dead, and the Clinton administration shifted to export-control regulations as a way to limit the spread of strong encryption. Those export controls were progressively loosened through the late 1990s as the commercial internet made strong encryption a business necessity. ## Crypto War II: Apple v. FBI and the going-dark debate (2015–2016) The encryption fight reignited in December 2015, when the FBI sought a court order compelling [[Apple]] to create a modified version of iOS that would disable the security features on the iPhone used by one of the San Bernardino shooters. Apple CEO Tim Cook publicly refused, arguing that creating the tool would be a "master key" that could be used on any iPhone and would set a precedent for government-compelled weakening of security. The Justice Department obtained a court order under the All Writs Act of 1789; Apple challenged it; and the case was mooted when the FBI announced it had purchased a third-party exploit to access the phone without Apple's help. The case crystallized the modern "going dark" debate. FBI Director James Comey argued that encryption was creating spaces where law enforcement could not follow even with a lawful warrant — that the balance between security and liberty was tipping too far toward absolute privacy. Cryptographers and technologists responded with what became known as the "keys under doormats" argument: any mechanism that gives the government access to encrypted communications necessarily creates a vulnerability that can be exploited by hackers, foreign intelligence services, and criminals. There is no such thing as a backdoor that only the right people can use. ## The UK backdoor demand and Apple (2025) The argument continued to escalate internationally. In early 2025, the United Kingdom's Home Office issued a Technical Capability Notice under the Investigatory Powers Act 2016 demanding that [[Apple]] provide the UK government with the ability to access end-to-end encrypted iCloud data stored by any user worldwide — not just in the UK. Apple responded by disabling its Advanced Data Protection encryption feature for UK users rather than building a global backdoor. The episode demonstrated two things: that governments have not given up on compelling backdoors, and that the geopolitical implications of such demands extend far beyond the issuing country, since a backdoor built for the UK would be a backdoor available to every other government that demanded it. ## The EARN IT Act and legislative pressure In the U.S., the most persistent legislative vehicle for weakening encryption has been the EARN IT Act (Eliminating Abusive and Rampant Neglect of Interactive Technologies Act), introduced in 2020 and reintroduced in subsequent sessions. The bill would condition the Section 230 liability shield for online platforms on compliance with "best practices" for detecting child sexual abuse material (CSAM) — best practices that, as drafted, would effectively require platforms to scan encrypted content, which is technically incompatible with end-to-end encryption. The [[Electronic Frontier Foundation]] and other groups have argued that the bill is a backdoor mandate disguised as a child-safety measure. As of 2026, the EARN IT Act has not passed, but it has been reintroduced in every Congress since 2020 and remains the most likely vehicle for legislative action against encryption. ## The Salt Typhoon breach: the backdoor argument made real The strongest empirical argument against encryption backdoors arrived in late 2024, when the Salt Typhoon operation — a Chinese state-sponsored hacking campaign — was revealed to have compromised the lawful-intercept infrastructure of major U.S. telecommunications providers including AT&T, Verizon, and T-Mobile. The hackers exploited the very wiretapping capabilities that U.S. law (CALEA, the Communications Assistance for Law Enforcement Act of 1994) had required telecom carriers to build into their networks. In other words, the government-mandated access point designed for lawful surveillance became the entry point for a hostile foreign intelligence service — precisely the scenario that encryption advocates had warned about for three decades. The irony was not lost on the cybersecurity community: the FBI, which had spent years arguing that encryption was a threat to national security, was now advising Americans to use end-to-end encrypted messaging apps to protect themselves from the Chinese espionage that had been enabled by the government's own surveillance infrastructure. The Salt Typhoon breach did not resolve the encryption debate, but it shifted the evidentiary landscape in a way that backdoor advocates have struggled to answer. ## See also [[Surveillance State]] · [[Privacy]] · [[Fourth Amendment]] · [[NSA]] · [[Apple]] · [[ACLU]] · [[Electronic Frontier Foundation]] · [[Surveillance Capitalism]] · [[Flock Safety]]