Author: Richard ClaytonRichard Clayton
Date: Dec 7, 2006 10:56
>Cryptography is legal in the United Kingdom. Notably:
>
> * Digital signatures on documents are taken to be legally binding.
They are "admissible in evidence in relation to any question as to the
authenticity of the communication or data or as to the integrity of the
communication or data".
Which you may or may not think is the same thing, until you look at the
reality of a keyboard sniffer or keys that are too short, or algorithms
that are used unwisely...
> * The state can demand the keys to encrypted documents and you face
>a two year prison sentence if you do not.
This isn't yet true [that part of RIP 2000 is not yet in force], but the
Home Office are signalling that it may well be soon (and the penalty for
non-compliance will be 5 years for some types of crime)
> * This does not apply to keys used only for Digital Signatures.
that will be true, yes
> * If you do not know the key then you can't be prosecuted.
|