
An EU insider writes (paraphrased): As you say, an EU policy on cryptography requires the utmost care. We have been following US initiatives closely. The USG's latest proposal attempts to balance the need for security with the need to tackle crime. Some EU Member States have begun work possibly leading to Government access to keys (where legally authorised). Various conventions and laws set out rights for the citizen and these will be respected. It is not suggested that access should include signature keys, only those for message confidentiality (as with police search powers). comment: The term "Government access to keys" is used. No mention of mandatory GAK, or the (in)effectiveness of GAK against crime. He refers to "message confidentiality ... police search powers" by which he perhaps means wiretap, rather than search. Or perhaps he means storage as well as messages. His "signature keys" does not specify the plan for a dual-purpose key, but my guess is they would wish to obtain a dual-purpose key if interested in its cyphertext.