France Moves to Break Encrypted Messaging
Source: Hacker News
France’s intelligence delegation in parliament has formally backed breaking the encryption that protects WhatsApp, Signal, and Telegram conversations, recommending that magistrates and intelligence agents be granted what lawmakers describe as “targeted access” to messages that platforms currently cannot read even themselves.
The delegation, an eight‑member body composed of four deputies and four senators, published its conclusions on Monday after months of work on a question that keeps returning to the French Parliament.
“The inability to access the content of encrypted communications constitutes a major obstacle for the work of the justice system and intelligence services,” the delegation wrote, framing end‑to‑end encryption as a problem to be solved rather than a protection to be preserved.
The technology end‑to‑end encryption uses is precisely the thing the delegation wants weakened. Decryption keys live on user devices, not on company servers, which means the platforms holding your messages genuinely cannot read them. That’s the design and the point. Strip that property away and the protection collapses because a system that lets investigators read messages on demand is also a system that can be abused, leaked, subpoenaed, or hacked.
French police and intelligence services have spent years complaining about this tech. They can still intercept old‑fashioned phone calls and SMS messages with a judge’s warrant, but encrypted platforms route around that capability entirely.
Reclaim Your Digital Freedom
Get unfiltered coverage of surveillance, censorship, and the technology threatening your civil liberties.
The delegation acknowledged that investigators already have a workaround called RDI (“collection of digital data”), which can involve compromising a target’s device and harvesting its contents wholesale through what officials call “remote interception” or “remote captures.” That technique gives security services access to everything on a phone—far more than just the messages they’re chasing. The delegation called it inadequate anyway.
Political debate
- Senator Cédric Perrin (chair of the foreign affairs committee and member of the intelligence delegation) has been pushing this fight for over a year.
During debate on a narcotraffic bill, he secured an amendment that would have forced messaging platforms to “implement the necessary technical measures in order to allow intelligence services to access the intelligible content of communications and data passing through them.” - Sanctions: Refusal to comply would have carried fines of up to 2 % of worldwide annual revenue.
- Outcome: The Senate passed the amendment; the National Assembly killed it, with Macronist deputies, the left, and even the Rassemblement National (RN) voting it down.
Perrin’s framing then was that nothing fundamental was changing.
“I don’t see how there would be any difference between what is done today with SMS and emails and what would be done tomorrow with WhatsApp, Signal, and Telegram,” he said, with backing from then‑Interior Minister Bruno Retailleau and Justice Minister Gérald Darmanin.
The argument treats encrypted messaging as just another communication channel that should sit within reach of the state, ignoring that the entire reason these platforms exist is to occupy a different category.
Technical objection
Aurélien Lopez‑Liguori, the RN deputy who opposed the amendment, made the technical objection bluntly:
“This is a total misunderstanding of what encryption means. The decryption keys are at the level of users’ devices. The key isn’t centralized somewhere within the platform. You would then have to set up backdoors for all communications, which would go far beyond the scope of fighting drug trafficking. The first hacker to come along would have access to our communications.”
Translated into engineering terms, his point was the one cryptographers have been making for thirty years: there is no such thing as a backdoor only the good guys can use.
“Ghost participant” proposal
Perrin now offers a different framing.
“Article 8 ter, which I had adopted, was not at all aimed at obtaining encryption keys but at introducing a ghost participant into a conversation before encryption,” he says.
The “ghost participant” approach—sometimes called a ghost user proposal—was floated by GCHQ in 2018 and rejected by every major privacy organization, civil‑liberties group, and security researcher who looked at it. The idea is that the platform silently adds a third recipient, an invisible intelligence agent, to a supposedly two‑person conversation. Users never see them.
- The encryption technically still works, except that one of the parties is the state.
Perrin also rejected the suggestion that civil liberties were at stake.
“Protecting public freedoms is our concern as parliamentarians. That was addressed through various administrative and judicial checks. The work carried out within the delegation was about getting a clearer technical picture of what is or isn’t possible. It’s curious that the RN, which constantly emphasizes its desire to protect the French people, doesn’t want to give intelligence services the tools to do so,” he said.
Report conclusions
The delegation’s report concluded that targeted access is not technically out of reach and noted that an expert group convened by the European Commission is working on a technological roadmap to identify how such access could be built. This means the technical problem cryptographers have been describing as unsolvable is being treated as a project‑management exercise.
Mass surveillance, of course, isn’t what the delegation is proposing. The fear isn’t that a French investigator will read every WhatsApp message. The fear is that infrastructure built for targeted access has a way of growing—an authentication mechanism built for terrorism cases ends up serving organized‑crime cases, then drug cases, then immigration cases, then political cases.
French Encryption Debate – A Summary
The French Senate’s right‑and‑center majority is split over the direction of a new intelligence‑focused legislative proposal.
Senator Olivier Cadic’s Amendment
- Who: Senator Olivier Cadic (Centrist Union)
- What: An amendment to a separate bill on critical‑infrastructure resilience and cybersecurity.
- Key Provisions:
- Write encryption protection into French law.
- Prohibit any obligation on messaging services to install backdoors.
- Status: Adopted by the Senate in March 2025.
Intelligence Delegation’s Response
“This new Article 16 bis would weaken the legal framework for intelligence and investigative techniques and would hinder their implementation.”
The delegation attacks Cadic’s amendment directly, ignoring his reasoning:
“I am obviously in favor of tracking down criminals, but not with tools that could bring us down. We must not create our own vulnerabilities.”
Cadic’s bill was examined in committee at the National Assembly in September and has been stalled since.
Government Commission
Earlier this year, then‑Prime Minister Sébastien Lecornu commissioned deputy Florent Boudié (chair of the National Assembly’s law committee) to examine “possible changes to existing legal frameworks” for giving investigators access to encrypted communications.
- Legislative vehicle: Still undecided.
- Parliamentary stance: Lawmakers are waiting for Boudié’s output but are reportedly open to a fresh proposition de loi if needed.
The Real Issue
What’s underway in France isn’t a debate about whether intelligence services should have investigative tools—they already do. France’s arsenal includes:
- RDI authority to compromise individual devices
- Expanded surveillance algorithmique (2023)
- Satellite interception powers
- Traditional wiretaps and metadata access
- Cooperation of every French telecom operator
The new fight is about the one category of communication that currently resists state interception—secured by mathematics rather than by promise. The delegation’s answer is yes, the resistance should disappear. The cryptography itself hasn’t changed; the political will to ignore what the cryptography says has.