UK government's bid to get Lauri Love, a man accused of hacking into US government computers, to reveal his encryption passwords thrown out by UK judge
Context & Ripple Effects
Lauri Love was rearrested in July 2015 and charged with hacking US government agencies including the US Army, NASA, and the Federal Reserve, with extradition to the United States hanging over the case. The UK government then tried a second lever: a court order forcing Love himself to reveal the passwords to his encrypted devices.
The judge has now thrown out that compulsion bid — a ruling that lands mid-extradition fight and matters because it denies prosecutors direct access to whatever evidence sits encrypted on his machines. It also prefigures the broader confrontation over encryption access that later saw the Home Office order Apple to build a cloud backdoor, prompting Apple's legal challenge against the UK government.
First-order effects
- Love cannot be legally compelled to decrypt his own devices, removing the government's most direct route into evidence on his computers while the extradition case proceeds.
- US authorities pursuing the NASA, Army, and Federal Reserve hack charges lose the prospect of decrypted material being handed over from the UK side.
Second-order effects
- Investigators must fall back on conventional forensic and intelligence routes instead of compelled decryption, raising the evidentiary bar in hacking prosecutions where suspects encrypt their drives.
- The ruling hands ammunition to future defendants facing compulsion orders, and pushes the Home Office toward provider-side measures — the path it took with its September order targeting Apple's UK cloud users.
Third-order effects
- If courts keep refusing to force individuals to decrypt, the state's leverage migrates from suspects to service providers, making statutory backdoor mandates on companies like Apple the primary battleground over lawful access.
- Encryption-at-rest becomes a practical shield in cross-border cybercrime cases, straining extradition arrangements like the UK–US one this case tests.
The trend: UK authorities are shifting from compelling individual suspects to hand over passwords toward forcing technology providers to build access into encrypted services.