Lavabit Details Unsealed: Refused To Hand Over Private SSL Key Despite Court Order & Daily Fines
from the as-expected dept
It appears that some of the details that resulted in Lavabit shutting down have been unsealed, and Kevin Poulsen, over at Wired, has the details and it's pretty much what most people suspected. The feds got a court order, demanding that Lavabit effectively hand over the keys to everyone's emails. Lavabit's Ladar Levison refused, and he was then threatened with $5,000/day fines, contempt of court charges and possibly more.Initially, Lavabit was sent a pen register order letting the government know every time Ed Snowden logged in (Snowden's name is redacted, but it's clear that this is about him). Lavabit said that it wouldn't defeat its own encryption system, and the court quickly ordered Lavabit to comply:
By July 9, Lavabit still hadn’t defeated its security for the government, and prosecutors asked for a summons to be served for Lavabit, and founder Ladar Levison, to be held in contempt “for its disobedience and resistance to these lawful orders.”Once again, Levison refused to reveal the SSL keys, leading to the $5,000 per day fine imposed by Magistrate Judge Theresa Buchanan. The fines began August 6th. Lavabit shut down on August 8th.
A week later, prosecutors obtained the search warrant demanding “all information necessary to decrypt communications sent to or from the Lavabit email account [redacted] including encryption keys and SSL keys.”
Again, something along those lines was what many people had assumed happened, but now it's been confirmed. Kudos to Levison for standing his ground on this. I know that people in our comments like to insist that every company should act this way, but it's not nearly as easy when its your life's work on the line, and you have the entire US government (including huge monetary fines and the possibility of jail time) coming down on you.
Thank you for reading this Techdirt post. With so many things competing for everyone’s attention these days, we really appreciate you giving us your time. We work hard every day to put quality content out there for our community.
Techdirt is one of the few remaining truly independent media outlets. We do not have a giant corporation behind us, and we rely heavily on our community to support us, in an age when advertisers are increasingly uninterested in sponsoring small, independent sites — especially a site like ours that is unwilling to pull punches in its reporting and analysis.
While other websites have resorted to paywalls, registration requirements, and increasingly annoying/intrusive advertising, we have always kept Techdirt open and available to anyone. But in order to continue doing so, we need your support. We offer a variety of ways for our readers to support us, from direct donations to special subscriptions and cool merchandise — and every little bit helps. Thank you.
–The Techdirt Team
Filed Under: doj, ed snowden, email, encryption, fbi, ladar levison, pen register, privacy, ssl, wiretap
Companies: lavabit
Reader Comments
Subscribe: RSS
View by: Time | Thread
Google, though, COULD easily withstand such fines indefinitely.
Spying is the main 'business model' of the internet, especially for Google and Facebook.
[ link to this | view in chronology ]
Re: Google, though, COULD easily withstand such fines indefinitely.
[ link to this | view in chronology ]
Re: Google, though, COULD easily withstand such fines indefinitely.
[ link to this | view in chronology ]
Insert OOTB incoherent borderline schizophrenic rants
[ link to this | view in chronology ]
Re: Insert OOTB incoherent borderline schizophrenic rants
Insert OOTB incoherent borderline schizophrenic rants
Come to think of it the only good part of that technology is you can track likes OOTB and have him civilly committed.
There you go, kids. Just takes the right button to be pushed, an enemy to be hated, here over mere web-site comments, and you'll turn into petty tyrants hoping for the state machinery to be used against them. Your future is grim. Those running the world know how easily manipulated you are.
[ link to this | view in chronology ]
Re: Re: Insert OOTB incoherent borderline schizophrenic rants
[ link to this | view in chronology ]
Re: Re: Insert OOTB incoherent borderline schizophrenic rants
(sometimes it's freaking eerie)
[ link to this | view in chronology ]
Wow...
[ link to this | view in chronology ]
Re: Wow...
[ link to this | view in chronology ]
Re: Wow...
[ link to this | view in chronology ]
[ link to this | view in chronology ]
Re:
I agree I'd rather a provider who follows this approach than one who doesn't, but I'd even-more-rather a provider where it's not even a concern (if such a thing is possible)
[ link to this | view in chronology ]
Can the government legally force a business to commit fraud?
[ link to this | view in chronology ]
Re: Can the government legally force a business to commit fraud?
[ link to this | view in chronology ]
[ link to this | view in chronology ]
Re:
The technology exists, getting people to use it is the problem.
[ link to this | view in chronology ]
Re:
[ link to this | view in chronology ]
Re: Re:
And then you publish all documents sent to you. And then you dox the fuckers and make THAT info public too.
After all, if they have nothing to hide...
[ link to this | view in chronology ]
Re: Re: Re:
He probably made the best decision for himself: He can't decrypt his service if his service doesn't exist. It's part of the EULA to discontinue it at any time for any reason, so the secret courts will be having a bitch of a time trying to argue that he broke the law by discontinuing it.
[ link to this | view in chronology ]
Re: Re: Re:
[ link to this | view in chronology ]
Re:
There's a possibility that he didn't comply not because of his morals, but because of his inability to do so. But good luck explaining that to the secret courts whose only answer to everything is "How soon can it be done?".
[ link to this | view in chronology ]
..every company SHOULD act this way...
Indeed, Kudos, Mr Levison, for a very difficult decision under tremendous pressure.
[ link to this | view in chronology ]
[ link to this | view in chronology ]
[ link to this | view in chronology ]
Simply by passively eaves dropping/intercepting all SSL traffic from internet backbone exchanges. With Lavabit's private SSL session key, they could then decrypt the packets and view the plain text email password inside each intercepted packet.
Please, don't get confused and tell me Lavabit's passwords were hashed before being sent out over the wire. This most likely is not true. At least from what I've read about Lavabit's cryptographic setup, which seemed entirely server-side.
It's true that Lavabit passwords are stored in hash form on Lavabit's servers themselves. However, the email passwords were most likely transmitted in the clear over the wire (not counting SSL encryption, which would have been useless if US gov has SSL private session key). Then the servers themselves, performed the hashing operation on the clear text password. Verifying if the server computed hash matches the hash value stored on the server's hard drive.
So yes, passwords were stored in hash form on the servers, but the servers themselves were doing the hashing AFTER receiving the user's plain text password over the wire.
The only way a client can send a hashed password over the wire, is through client-side software. Hashing can be done using javascript code running inside a client's web browser, but from what I read it doesn't seem like Lavabit was doing this.
So in order to prevent every single customer's password from being sniffed off the internet backbone. Lavabit would have needed to use SSL with Perfect Forward Secrecy or would need clients to hash their plain text email passwords client-side, before sending them over the wire to the server.
Even then, all it would take is a National Security Letter and gag order, signed by the Secret Rubber-Stamp Court. To insert a backdoor into the client-side software, and compromise all customers, or select customers, passwords.
This is why I no longer do business with American IT companies. You never know what the Secret Rubber-Stamp Court is going to do next, and what kind of gag orders they'll deploy to shut everyone up. Or throw them in prison.
I just wanted to explain how the US Gov could intercept all the passwords, for all of Lavabit's customers, if the US Gov had possession of Lavabit's private SSL key.
Unless Lavabit was using Perfect Forward Secrecy. In that case, being in possession of the private SSL key would do the US Gov no good. Every single client connecting to Lavabit, would have a uniquely generated private session key. With no way to decrypt all those encrypted sessions. Even if the US Gov did have Lavabit's private SSL key.
[ link to this | view in chronology ]
Re:
Just saying....
[ link to this | view in chronology ]
Re: Re:
Logic dictates that if they had a backdoor, they would not need to ask for the key.
[ link to this | view in chronology ]
Re: Re: Re:
[ link to this | view in chronology ]
Passwords and encryption
2. You don't ever want to send encryption passwords or their hashes over the Internet. The proper way is to encrypt locally and send encrypted messages only. Besides, if you're doing encrypted email you're probably using PKI, which doesn't require any passwords be used or transmitted.
3. As you've pointed out, client-side software is vulnerable to being replaced with compromised versions. This is why your email provider should never be the same legal entity as the one which distributes the client-side software. This is why encrypted Webmail will never work.
[ link to this | view in chronology ]
Re: Passwords and encryption
1. User creates a new account and chooses a password. That password is used to wrap (encrypt) a symmetric key inside an outer AES encrypted 'shell'.
The user needs to know the correct plain text password to unlock the outer AES 'shell', in order to gain access to the symmetric key wrapped inside the outer AES shell.
User also generates a hash of their plain text password. User then sends this hash value, plus the wrapped symmetric key, to the server for storage. This is all done with client-side software during account signup.
2. In order to log into the server, the user creates a hash value of their plain text password, and sends this hash value to the server.
2. Server compares the received hash value to the one it has on file for that user's account. If the hash value matches, server sends the user back their wrapped symmetric key.
3. User unlocks the wrapped symmetric key using their plain text password. User can then encrypt and decrypt all email messages using that unlocked symmetric key.
The only thing the hash does, is verify the user knows the correct plain text password, at which point the server will send the user their wrapped symmetric key.
The hash cannot unlock the outer AES encrypted shell, wrapped around the symmetric key. Only the user's plain text password can unlock the outer wrapping (shell). The plain text password never gets sent to the server over the wire. The plain text password never leaves the user's computer.
Of course all the encryption would have to be done client-side. Which is probably why Lavabit never attempted it, because doing encryption client-side is much harder than doing it server-side.
On a bright note though, the user never has to worry about loosing their private encryption key, because it's stored (encrypted) on the server. Which avoids all the PKI key distribution headaches.
I realize I wasn't clear about all this in my first post, but I was trying to keep things simple and not long winded. I just find cryptography an interesting subject, but I'm far from a cryptography specialist.
[ link to this | view in chronology ]
My favorite bit
[ link to this | view in chronology ]
Re: My favorite bit
[ link to this | view in chronology ]
Re: My favorite bit
[ link to this | view in chronology ]
Heroic corporate leader
I know I'd drop $100 on just about anything he does.
He's a hero.
[ link to this | view in chronology ]
Re: Heroic corporate leader
[ link to this | view in chronology ]
Re: Re: Heroic corporate leader
[ link to this | view in chronology ]
Re: Heroic corporate leader
https://rally.org/lavabit
[ link to this | view in chronology ]
[ link to this | view in chronology ]
Re:
Did the FBI ask to entrap him?
[ link to this | view in chronology ]
[ link to this | view in chronology ]
Re:
[ link to this | view in chronology ]
Re: Re:
[ link to this | view in chronology ]
Re:
Huh? I don't see anything remotely resembling that here at all. It looks like a very confused judge who didn't seem to care that the remedy the gov't sought would completely decimate the privacy of 400,000 users.
That's not the rule of law at all.
[ link to this | view in chronology ]
[ link to this | view in chronology ]
Re:
[ link to this | view in chronology ]
They also wanted to do it in a way that would let them not just read emails but also write fake emails. i.e. write fake untraceable evidence, since emails can and are used as evidence.
"accomplish the installation and use of the pen/trap device"
They've also substituted a 'device' for the request for data. So instead of the data being handed over in a way that a court can verify (and Lavabit can verify in its role as guardian of the data), a black box is added with an unverifiable promise that it only does legal stuff and grabs nothing else. The leaks show these devices go far beyond their legal remit.
The judge, a non-techie, trusts the badge, without understanding the issue.
"�He�s had every opportunity to propose solutions to come up with ways to address his concerns and he simply hasn�t.�"
*He* should address HIS concerns? What some sort of self arguing?
"�It filters everything, and at the back end of the filter, we get what we�re required to get under the order....No one looks at that, no one stores it, no one has access to it."
Liar. It splits the data into filtered and unfiltered. The filter is made available to the FBI agent, the unfiltered+filtered is stored in the NSA giant database aka 'lockbox'. General 'collect it all' collects it all. We got that from the leaks.
But the key to me is, IT LETS THEM FAKE COMMUNICATIONS. He would be handing over a key that would let the NSA make fake & send emails, impersonating any Lavabit user with an audit trail that would pass forensic investigation. I assume that was the intention when they didn't just want Lavabit's email, they wanted the ability to put a device in with Lavabits own SSL keys.
[ link to this | view in chronology ]
Response to: Anonymous Coward on Oct 2nd, 2013 @ 8:56pm
Why not ask for access to decrypted emails instead of asking for the ability to pretend to be the user?
[ link to this | view in chronology ]
Re: Response to: Anonymous Coward on Oct 2nd, 2013 @ 8:56pm
[ link to this | view in chronology ]
[ link to this | view in chronology ]
hero
[ link to this | view in chronology ]
$5k fine
If it is legal, what the hell kind of law allows for that. "Tell us WHATEVER we want or else we fine you, because I'm a judge and f*** you"
[ link to this | view in chronology ]