Forced Decryption and the 5th Amendment: Analytical Issues in the 11th Circuit’s Recent Decision

Last Thursday, the Wall Street Journal and Volokh Conspiracy reported that the Court of Appeals for the Eleventh Circuit recently decided that forcing a suspect to decrypt and provide a hard drive when the government did not already know what it contained violates the suspect’s Fifth Amendment protection against self-incrimination. While most of the Court’s analysis seems correct, I have a few problems with some parts of the analysis and have tried addressing these issues in this post.

The facts of the case, In re Grand Jury Subpoena Duces Tecum Dated March 25, 2011, are as follows. The government served a subpoena duces tecum on the suspect (“Doe”), compelling him to produce the unecrypted contents located on the hard drives of his laptop computers and five external hard drives. In re Grand Jury Subpoena Duces Tecum Dated March 25, 2011, No. 11-12268, 2012 WL 579433, at *1 (11th Cir. Feb. 23, 2012). Doe refused to comply with the subpoena, instead invoking his Fifth Amendment right against self-incrimination. Id. The U.S. Attorney applied to the district court for an order that would grant Doe immunity and require him to respond to the subpoena. Id. The district court rejected Doe’s explanations, judged him to be in contempt of court, and ordered him incarcerated. Id.

On appeal, the 11th Circuit arrived at two overall conclusions. First, [the district court] erred in concluding that Doe’s act of decryption and production would not constitute testimony. Second, in granting Doe immunity, it erred in limiting its immunity, under 18 U.S.C. §§ 6002 and 6003, to the Government’s use of his act of decryption and production, but allowing the Government derivative use of the evidence such act disclosed. Id. at 3. I will be focusing on the first issue—the issue of “whether the act of production may have some testimonial quality sufficient to trigger Fifth Amendment protection when the production explicitly or implicitly conveys some statement of fact.” Id. at 4.

The Court stated that there were two ways for the government to avoid implicating the Fifth Amendment right. First, Doe’s decryption and production of the hard drives would have to be a physical act, not a testimonial act that “requires the use of the contents of his mind.” Second, the government would have to already know what is inside the drives. The government would only be asking Doe to produce the decrypted drives; the knowledge of what is inside would have only been a foregone conclusion. However, the Court held that the government failed in satisfying either of these methods. The Court stated that it reached its holding for this issue by concluding that “(1) Doe’s decryption and production of the contents of the drives would be testimonial, not merely a physical act; and (2) the explicit and implicit factual communications associated with the decryption and production are not foregone conclusions.” Id. at 8.

While the Court’s analysis mostly seems correct, I have a few problems with some parts of the analysis. First, regarding the distinction between a physical act and a testimonial act, the Court lists some implied factual statements that determine whether or not Doe’s decryption and production of the hard drives would be testimonial. The Court states that “the decryption and production would be tantamount to testimony by Doe of his knowledge of the existence and location of potentially incriminating files; of his possession, control, and access to the encrypted portions of the drives; and of his capability to decrypt those files.” Id. The latter two factors can certainly be classified as making the use of one’s mind, but I would argue that the first factor should not be involved if Doe were to decrypt and produce the hard drives. By producing the decrypted hard drives, Doe would be showing that he had possession, control, and access to the hard drives, and he would also be showing that he had the ability to decrypt the files. In regards to the first factor, however, Doe would not necessarily be showing that he had knowledge of the existence and location of potentially incriminating files. The government basically just needs the decryption passwords so it can access the encrypted partitions inside the hard drives.

Second, the Court uses a useful analogy in comparing Doe’s situation to surrendering a combination as opposed to surrendering a key; however, I believe that the Court’s analogy should focus on a different point. The Court believes that producing a key is a physical act while producing a combination is a testimonial act that requires use of the contents of one’s mind. The Court analogized Doe’s situation to producing a combination, saying that “[r]equiring Doe to use a decryption password is most certainly more akin to requiring the production of a combination because [it demands] the use of the contents of the mind, and the production is accompanied by the implied factual statements noted above that could prove to be incriminatory.” Id. To further explain its point, the Court referred to the Supreme Court’s explanation of this distinction in U.S. v. Hubbell:

“The assembly of those documents was like telling an inquisitor the combination to a wall safe, not like being forced to surrender the key to a strongbox . . . The Government’s anemic view of respondent’s act of production as a mere physical act that is principally nontestimonial in character and can be entirely divorced from its “implicit” testimonial aspect so as to constitute a “legitimate, wholly independent source” . . . for the documents produced simply fails to account for these realities.” U.S. v. Hubbell, 530 U.S. 27, 43 (2000).

My problem with the Court’s analysis here is that I believe the focus should simply be on whether or not implied factual statements are involved or not. A key vs. combination analogy seems to wrongly focus on a physical production of a key as opposed to a mental production of a combination, and whether there are implied factual statements seems to be an additional factor to consider when that should be the primary factor.

Putting this proposal into action, if compelling the production of a key or combination to some kind of safe ends up involving implied factual statements, then such an act of production would be testimonial. For instance, in this case, the key factor is whether or not the government actually knows that Doe has “knowledge of the combination”—for instance, whether Doe has the decryption passwords for the hard drives. If the government is not sure whether or not the suspect has knowledge of the combination, then the act of production should qualify as a testimonial act because such an act would be accompanied by the implied factual statement that the suspect knew the combination (e.g., a decryption password in this case). However, if the government knows that the suspect knows the combination, then producing the combination should qualify as a physical nontestimonial act. This would be functionally similar to asking a suspect to produce a key—there is no accompanying implied factual statement, and the combination would essentially be acting as a “key.”

Under this proposed focus, then, it is the fact that the government does not know for sure whether or not Doe has “the combination to the safe” that makes Doe’s decryption and production of the hard drives testimonial—producing the decrypted hard drives would bring in the implied factual statement that Doe knew the decryption passwords. In conclusion, the focus should simply be on whether or not implied factual statements are involved or not; this key point better fulfills the purpose behind the standard of “requiring the use of the contents of one’s mind.”

Leave a Reply