tag:blogger.com,1999:blog-6273930.post5288843700173859702..comments2024-03-08T07:29:54.585-04:00Comments on Canadian Privacy Law Blog: Ontario court case suggests that PGP and Blackberry security have been crackedprivacylawyerhttp://www.blogger.com/profile/03943567746055311435noreply@blogger.comBlogger2125tag:blogger.com,1999:blog-6273930.post-37878410552410609112016-01-16T08:22:16.548-04:002016-01-16T08:22:16.548-04:00Compare R v Avanis 2015 ONCJ 606 (CanLII) in which...Compare <i>R v Avanis</i> 2015 ONCJ 606 (CanLII) in which evidence from the accuseds' BlackBerries was admitted. There is discussion of a "parsing and chipping" process for figuring out the texts. The court complained that the Crown had not brought expert evidence to show that the resulting evidence was authentic, but decided that it has been sufficiently authenticated to admit in any event.<br /><br />My comment on the case - focusing not on decryption but on authentication and best evidence - is on the Slaw.ca blog: "Smartphone Evidence".John Ghttps://www.blogger.com/profile/03273648513038897597noreply@blogger.comtag:blogger.com,1999:blog-6273930.post-89940551977691607992016-01-14T11:18:44.415-04:002016-01-14T11:18:44.415-04:00My money is on either bad opsec or the judge simpl...My money is on either bad opsec or the judge simplifying the details of the case to the point of mischaracterizing what actually happened (the judge's comments in the following paragraphs suggest to me that this judge isn't well versed in cryptography). <br /><br />Or maybe I just don't want to accept that PGP might not be as secure as I thought.<br /><br />Either way it would be nice to have more details. As far as I rememember, PGP lets you select between a few different encyrption algorithms and key lengths, so even if some PGP configurations are suspect, others might still be secure. <br />Matt Lonsdalehttps://www.blogger.com/profile/01514918735962685772noreply@blogger.com