[Cryptography] China doesn't pass law requiring tech firms to hand over encryption keys

[John Levine]

>China passes law requiring tech firms to hand over encryption keys

The WSJ says that the law was changed slightly before passage:

 The final version of the law requires telecom operators and Internet
 companies to help authorities with decryption of data and other
 counterterrorism efforts. Unlike the draft version, however, it leaves
 out some controversial language requiring tech companies to store
 their data locally and provide their encryption systems for review to
 be able to operate in China. ...

 "Telecommunications and Internet service providers should provide
 technical interfaces and technical support and assistance in terms of
 decryption and other techniques to the public and national security
 agencies in the lawful conduct of terrorism prevention and
 investigation," says a final version of the law, published by the
 official Xinhua News Agency.

Nobody seems to know exactly what that means.  Maybe it means back
doors, maybe it just means do what you can do.

http://on.wsj.com/1mdqY78

R's,
John