English edition ·
// l0g investigation · encryption and state power
The Cost of a Backdoor
Private messages, investigations and state power
Who can read our messages, on which devices, and with what consequences for other users? This book brings together seven investigations following the copies, keys and decisions that organise access. From the French debate to documentation from Apple, Signal and American and Chinese authorities, it examines investigative needs, the risks of hijacked access and the resources required for oversight. Uncertainty remains visible alongside the evidence throughout.
- 7
- complete analyses
- 21
- infographics
- EPUB 3
- offline reading
01 / introduction
The power to read a message
A private message can carry an industrial drawing, a family conversation or information that helps explain a crime. Encryption sets conditions on who can read it. It protects content along particular routes and places secrets on the devices that need to recover it. When an authority seeks an additional route in, its decision also concerns other people who depend on the same service. Users’ security, investigative work and companies’ responsibilities meet within an architecture they may share.
France provides the opening case. In the parliamentary record examined as of 7 November 2026, the government proposes deleting a safeguard intended to protect encryption against imposed weakening. It invokes the needs of investigations and intelligence. Chapter one dates the stages of a parliamentary process that remains open in the reviewed record. A demand expressed in law still needs a technical form. The functions created, the people entitled to use them and the protections around them determine the reach of the resulting power.
An original introduction opens the book and connects the seven analyses.
Evidence for this excerpt: the National Academies evaluation framework · government amendment No. 358.
02 / reading journey
From protected messages to the evidence required
The seven complete analyses, in reading order. Each chapter remains available online with its references and limitations.
01Encryption: France’s government moves to scrap the safeguard against backdoors
France’s government seeks to delete Article 16 bis, a proposed encryption safeguard. The parliamentary record, backdoor risks and economic stakes explained.
02Encryption: the journey of a business secret
Messages, linked devices and backups: trace the keys to understand who can read a business secret and how the work can be recovered.
03Encryption: who controls the state’s access to our messages?
Who authorises, activates and oversees access to encrypted messages? France, the US and China: the mechanisms, safeguards and allocation of costs.
04iCloud: privacy changes across borders
Apple in the UK, GCBD contracts in China and French cloud procurement: trace the keys, privacy safeguards and work involved in switching services.
05Encryption: who bears the cost when access is hijacked?
Salt Typhoon, Vodafone, Juniper and Orange: distinguish intrusions, hijacked capabilities, recovery and the distribution of losses.
06Encryption: the other routes to evidence
Signal, EncroChat and ANOM: alternative routes to evidence, documented results, European deadlines and the resources investigations need.
07Encryption: the burden of proof
Encrypted messages: FBI reporting, a European survey and the AES study help assess the benefits, risks and costs of mandated access.
03 / reference
The language of access, keys and evidence
A glossary accompanies the book. These reference pages also support further reading online.
- End-to-end encryption
- Communication protection in which content is encrypted on the sending device and decrypted on the recipient’s device. In this architecture, a relay carrying the message handles encrypted content. Confidentiality also depends on participant authentication, device security and the handling of backups and copies. Metadata may remain available, depending on the service.
- Backdoor
- A mechanism deliberately introduced to allow access by bypassing protection normally provided by a system. It may involve an additional key, a hidden function or another privileged access route. That deliberate introduction distinguishes it from an accidental vulnerability. Its reach and the risk of misuse depend on the architecture and controls.
- Recovery key
- A secret used by a service or application to regain access to protected data. The copies it can unlock, required permissions and additional protections depend on the architecture. Its storage needs to be planned alongside backups and restoration rights. Copies already obtained require separate assessment when keys are changed.
- Forward secrecy
- A cryptographic property limiting the effect of a later compromise of secrets on earlier exchanges. Its guarantee depends on the protocol, the mode used and deletion of the secrets needed to reconstruct earlier keys. Histories retained or backed up by the application have their own protection. Protecting future exchanges after a compromise is the separate property of post-compromise security.
- Audit log
- A record of events useful for examining a system: access, activation of a function, permission changes or delivery of data. Its value depends on the events collected, their timestamps and protection against unauthorized changes or deletion. Separate storage and distinct administration rights help preserve the evidence when a system is compromised.
- Least privilege
- A security principle limiting authorized access to what a person or process needs for its assigned tasks. It applies to data, functions and service accounts, including during system development and operation. Its effectiveness depends on the permissions actually enforced and reviewed. Separation of duties complements this principle by assigning certain functions to different roles.
04 / conclusion
Decisions backed by evidence and resources
The power to read a message is built through decisions reaching beyond the message itself. It depends on a device, an account, a key, a procedure and the people administering them. The journey through this book therefore leads back to a precise description of the proposed capability. The categories of accessible data, activation conditions and versions concerned make a proposal open to examination. The word “access” on its own leaves much of that decision out of view.
Protection first needs following through to the copies. Content can be protected during transmission and then retained on several devices. Backups have their own keys and recovery conditions. Replacing a secret may protect some future exchanges; a readable copy already held elsewhere requires separate assessment. For an organisation, mapping these routes helps with choosing services, preparing recovery and understanding an incident. That map connects a commercial promise to the actual possibilities for reading information.
The full conclusion connects the expected benefits of access, the people exposed to risk and the resources needed for lasting oversight.
05 / sources and edition
Public records and the limits of this edition
Edition dated 8 November 2026. Documentary cut-off: 7 November 2026.
This edition, dated 8 November 2026, brings together the seven investigations in their documentary state of 7 November. The individual article dates are retained. A bibliographic clarification of the release date of the American wiretap report was verified on 8 November; its figures and reporting period are unchanged. Its original introduction and conclusion synthesise those chapters while separating observations, interested parties’ positions and the analysis’s recommendations.
Text, contents, glossary and infographics are available offline. External sources require a connection. Image enlargement and displayed colours depend on your reading app.
The covers and panorama are conceptual illustrations created with AI assistance. The infographics retain the articles’ dates, units, sources and limitations.
The book is free and available as a direct download. Reuse of original text and infographics: Creative Commons Attribution 4.0 International.
To help keep these investigations freely available, the support page accepts one-time or monthly contributions, with Bitcoin support also available. Support l0g
Check file integrity
EPUB 3 · 11.4 MB · SHA-256
5518d5bb18745c6ab86ed8333df84f009c5c3b4313a647a749d0df4b97b80736