In Re: Under Seal

CourtCourt of Appeals for the Fourth Circuit
DecidedApril 16, 2014
Docket13-4625
StatusPublished

This text of In Re: Under Seal (In Re: Under Seal) is published on Counsel Stack Legal Research, covering Court of Appeals for the Fourth Circuit primary law. Counsel Stack provides free access to over 12 million legal documents including statutes, case law, regulations, and constitutions.

Bluebook
In Re: Under Seal, (4th Cir. 2014).

Opinion

PUBLISHED

UNITED STATES COURT OF APPEALS FOR THE FOURTH CIRCUIT

No. 13-4625

In Re: UNDER SEAL

------------------------------

UNITED STATES OF AMERICA,

Plaintiff – Appellee,

v.

LAVABIT, LLC.; LADAR LEVISON,

Parties-in-Interest – Appellants.

-------------------------------

AMERICAN CIVIL LIBERTIES UNION; AMERICAN CIVIL LIBERTIES UNION OF VIRGINIA; EMPEOPLED, LLC.; ELECTRONIC FRONTIER FOUNDATION,

Amici Supporting Appellants.

No. 13-4626

In Re: GRAND JURY PROCEEDINGS

v. LAVABIT, LLC.; LADAR LEVISON,

AMERICAN CIVIL LIBERTIES UNION; AMERICAN CIVIL LIBERTIES UNION OF VIRGINIA; EMPEOPLED, LLC.; ELECTRONIC FRONTIER FOUNDATION,

Appeals from the United States District Court for the Eastern District of Virginia, at Alexandria. Claude M. Hilton, Senior District Judge. (1:13−sw−00522−CMH−1; 1:13−dm−00022−CMH−1)

Argued: January 28, 2014 Decided: April 16, 2014

Before NIEMEYER, GREGORY, and AGEE, Circuit Judges.

Affirmed by published opinion. Judge Agee wrote the opinion, in which Judge Niemeyer and Judge Gregory joined.

ARGUED: Ian James Samuel, New York, New York, for Appellants. Andrew Peterson, OFFICE OF THE UNITED STATES ATTORNEY, Alexandria, Virginia, for Appellee. ON BRIEF: Jesse R. Binnall, BRONLEY & BINNALL, PLLC, Fairfax, Virginia; Marcia Hofmann, LAW OFFICE OF MARCIA HOFMANN, San Francisco, California; David Warrington, Laurin Mills, LECLAIRRYAN, Alexandria, Virginia, for Appellants. Mythili Raman, Acting Assistant Attorney General, Criminal Division, Nathan Judish, Josh Goldfoot, Benjamin Fitzpatrick, Brandon Van Grack, UNITED STATES DEPARTMENT OF JUSTICE, Washington, D.C.; Dana J. Boente, Acting United States Attorney, Michael Ben’Ary, James L. Trump, OFFICE OF THE UNITED STATES ATTORNEY, Alexandria, Virginia, for Appellee. Alexander A. Abdo, Brian M. Hauss, Catherine Crump, Nathan F. Wessler, Ben Wizner, AMERICAN CIVIL LIBERTIES UNION FOUNDATION, New York, New York; Rebecca K. Glenberg, AMERICAN CIVIL LIBERTIES UNION OF VIRGINIA FOUNDATION, INC., Richmond, Virginia, for Amici American Civil Liberties Union and ACLU of Virginia. Kurt Opsahl, Jennifer Lynch, Hanni Fakhoury, ELECTRONIC FRONTIER

2 FOUNDATION, San Francisco, California, for Amicus Electronic Frontier Foundation. Richard M. Martinez, Mahesha P. Subbaraman, ROBINS, KAPLAN, MILLER & CIRESI, L.L.P., Minneapolis, Minnesota, for Amicus Empeopled, LLC.

3 AGEE, Circuit Judge:

Lavabit LLC is a limited liability company that provided

email service. Ladar Levison is the company’s sole and managing

member. 1

In 2013, the United States sought to obtain certain

information about a target 2 in a criminal investigation. To

further that goal, the Government obtained court orders under

both the Pen/Trap Statute, 18 U.S.C. §§ 3123-27, and the Stored

Communications Act, 18 U.S.C. §§ 2701-12, requiring Lavabit to

turn over particular information related to the target. When

Lavabit and Levison failed to comply with those orders, the

district court held them in contempt and imposed monetary

sanctions. Lavabit and Levison now appeal the sanctions.

For the reasons below, we affirm the judgment of the

district court.

1 The record does not reflect the state of Lavabit’s organization or registration to do business. Neither does the record contain documents that verify the ownership of Lavabit’s membership interests or the identity of its managing member. The parties and the district court assumed below that Lavabit and Levison were “[o]ne and the same.” (J.A. 115.) As no party has indicated otherwise, we will also assume that Levison owns all interests in Lavabit and is fully authorized to act in all matters on Lavabit’s behalf. 2 Because of the nature of the underlying criminal investigation, portions of the record, including the target’s identity, are sealed.

4 I.

A.

This case concerns the encryption processes that Lavabit

used while providing its email service. Encryption describes

the process through which readable data, often called

“plaintext,” is converted into “ciphertext,” an unreadable

jumble of letters and numbers. Decryption describes the reverse

process of changing ciphertext back into plaintext. Both

processes employ mathematical algorithms involving “keys,” which

facilitate the change of plaintext into ciphertext and back

again.

Lavabit employed two stages of encryption for its paid

subscribers: storage encryption and transport encryption.

Storage encryption protects emails and other data that rests on

Lavabit’s servers. Theoretically, no person other than the

email user could access the data once it was so encrypted. By

using storage encryption, Lavabit held a unique market position

in the email industry, as many providers do not encrypt stored

data.

Although Lavabit’s use of storage encryption was novel,

this case primarily concerns Lavabit’s second stage of

encryption, transport encryption. This more common form of

encryption protects data as it moves in transit between the

client and the server, creating a protected transmission channel

5 for internet communications. Transport encryption protects not

just email contents, but also usernames, passwords, and other

sensitive information as it moves. Without this type of

encryption, internet communications move exposed en route to

their destination, allowing outsiders to “listen in.” Transport

encryption also authenticates -- that is, it helps ensure that

email clients and servers are who they say they are, which in

turn prevents unauthorized parties from exploiting the data

channel.

Like many online companies, Lavabit used an industry-

standard protocol called SSL (short for “Secure Sockets Layer”)

to encrypt and decrypt its transmitted data. SSL relies on

public-key or asymmetric encryption, in which two separate but

related keys are used to encrypt and decrypt the protected data.

One key is made public, while the other remains private. In

Lavabit’s process, email users would have access to Lavabit’s

public keys, but Lavabit would retain its protected, private

keys. This technology relies on complex algorithms, but the

basic idea is akin to a self-locking padlock: if Alice wants to

send a secured box to Bob, she can lock the box with a padlock

(the public key) and Bob will open it with his own key (the

6 private key). Anyone can lock the padlock, but only the key-

holder can unlock it. 3

The security advantage that SSL offers disappears if a

third party comes to possess the private key. For example, a

third party holding a private key could read the encrypted

communications tied to that key as they were transmitted. In

some circumstances, a third party might also use the key to

decrypt past communications (although some available

technologies can thwart that ability). And, with the private

key in hand, the third party could impersonate the server and

launch a man-in-the-middle attack.

When a private key becomes anything less than private, more

than one user may be compromised. Like some other email

providers, Lavabit used a single set of SSL keys for all its

various subscribers for technological and financial reasons.

Free access — add to your briefcase to read the full text and ask questions with AI

Related

In Re Gates
600 F.3d 333 (Fourth Circuit, 2010)
Clark v. Scott
70 F.3d 386 (Fifth Circuit, 1995)
United States v. Atkinson
297 U.S. 157 (Supreme Court, 1936)
Ashwander v. Tennessee Valley Authority
297 U.S. 288 (Supreme Court, 1936)
Singleton v. Wulff
428 U.S. 106 (Supreme Court, 1976)
Yee v. City of Escondido
503 U.S. 519 (Supreme Court, 1992)
McNeil v. United States
508 U.S. 106 (Supreme Court, 1993)
Nelson v. Adams USA, Inc.
529 U.S. 460 (Supreme Court, 2000)
Exxon Shipping Co. v. Baker
128 S. Ct. 2605 (Supreme Court, 2008)
Norfolk Southern Railway Co. v. City of Alexandria
608 F.3d 150 (Fourth Circuit, 2010)
Jackson v. Parker
627 F.3d 634 (Seventh Circuit, 2010)
Kingman Park Civic v. Williams, Anthony A.
348 F.3d 1033 (D.C. Circuit, 2003)
Richison v. Ernest Group, Inc.
634 F.3d 1123 (Tenth Circuit, 2011)
United States v. Byers
649 F.3d 197 (Fourth Circuit, 2011)
In Re Leonard L. Bianchi
542 F.2d 98 (First Circuit, 1976)

Cite This Page — Counsel Stack

Bluebook (online)
In Re: Under Seal, Counsel Stack Legal Research, https://law.counselstack.com/opinion/in-re-under-seal-ca4-2014.