FBI’s Ability To Access Secure Messaging App Content And Data ( FBI, Jan. 7, 2021) [ Property Of The People, FOIA]

0.7 MB·English

by  Federal Bureau of Investigation

UNCLASSIFIED//LAWENFORCEMENSTE NSITIVE
INVESTIGATION
(U//FOUO}F Bl'sA bilityt o LegallyA ccesSs ecureM essaginAg ppC ontenta nd Metadata
(U//LES-)A s of' November2020,_the•FBl's_abilityt o legaJlya ccesss ecure content on leading messag;jnga pplications is depicted below, including details.on accessible information based on-the applicable legal process. Return data provided
by the,compi3nies listec;Ib elow, with the txc;ep.tion of WhatsApp, are ~ctu,;1llyl pgs of latent data that. ar:e pn?vided to law ~nforcem,ent in a npn-r:eal-time manner and may impact )nve~tigation:sd ue to delivery delays..
UNCLASSIFIE/DL AWE NFORCEMENSTE NSITIVE
Line Signal Telegram Threerna Viber WeChat WhatsAp.p Wicl<r
-~" ~wt
~~
[l~I . "'
GI [fr
~
• Mes-~i!ge C?nten~:. L!mite.d "· Me~.~a~ ~onter-t: U~it¢* " F)li;i.Messac;!l. • NpM,essas;e; • N0Me;s~ag1;1 • _No,Mes~e • NC1Mess~e • Mi:ssa_geC onte:nt; Limited* f No Mes~;ageC .ontent
, Sll.bppen~; can renc;l.er bps.ii: • Sllspect's and/o_rvi<;tjm'.s Co-nter,t Conter1t Content Content Contet)t • Subpoena~~ an render basic • Dateandtimeaccount
• is.uS. bL:i...Sc.rCib.§e,rZin7f0o3r(md)a:tciio:lnn r ender Ir meg.aisgt~_rede,1d s ipn[f;oiyrn m;;1i,;m1teiq,e nr(o P.rap.fdil e • tDimaete ;,;a1u nsde r • (in'-lfqocrqmnta;ut;iti :in •· nHuam.sbh!oHf<pmbcdm !:: 11; {Pi.r~o.v pidheosn ae< :co.unt • Apri;e;Ose?prvt:as tionl etter'$ •· sCuobusrctr Oibredre rre: cSourdb:p-oena • Tcry-peea otefd d evicl";'(sa,pl p installed
:2a5nddatry.soonfiiaMtaersgseatnguem!oboekur1p s1o I.Did,d drea:t.es ,p pf hroengeiS otruamtio6n'e, .1r~ LtcIN,l E '" Lreagsits dtaetree odf a penrofovricdeemd efonrt ltaow 'epmroaviitdaeddd)rJeys s1if nreugmisbfrea:trito ndii.tq acanndm.s;.,rt.ptrb:0p\o/iedne. as,but rliekteu rtni~aCswkeed.lJ,u.asseinrsfo rm;:itlon • Date of lastus:e.
~, .SPbaeecankr RcuhpeWsJ1l~s:1r.rtfea~nrta.tn:r,gqcec;atadnperfav!nbic.iedlit;eiyfr L • f*nff.o,.r!~laax\1imonuom_onfuss.~evgeen davs-' tucoqsthenern'::essce. trivvi.cietv Tp9eru.Jrdseeugre.rAaasmrpo .eu'psrrr ti vaw • Pp.uUs!h~-hTsoekrevnlc1eif. is. • taMim·need,sl Po.saf .dcadrgerEnas;t>isoHanti s.tory: • crF.reoeiro;noitoer.ndd-i~nCf hoCairnh cia1c 1o<utn ts .., WSadehda,rarecJShs.AWSp-abpraurb;a,~eon qot:;nP,wtralo~"ivosi ·db,aeansv~ ~ •• T.ri,ocl4ci~mli~a~;rJ,r4e o_mfe:;bzjl.ejn:erc m;o[pfa hmlloD.ne.ess,( 1s?amge;isil
t{!Jg~tusesi C[otJcbi ackup, the worthofspe.c.ifiedu.sers.'iext statement_,.for u.sed t1me,.date,source accounts,thevcan thirt.a~gel jn Jhe1r.iddFe:,,,:; num_bef!i)~onnectedtpthe
l!□cryptionkeY$SJwuldaJsobe chats(OolywhenE2EEha_s.not confftmec:I •· P.ublicKev: nllmbera11d provide.basic bQo[rcqotacts. ;m;;or.tnbt,r .ttn ot pl~in!OO
PJ0Y!dOOwitcho otentJefurn; been elec;tedqndapplled-a.nd tE!rrarist • DateCnot_ime} destination information(name, • P~tl R~gister: Sent every 15 e)(l:ernal1 ~-them~elve:s-
c;analsoacquireiMessag~fro,m oolywhen.recei'-!ingan iov~ti_gations, ofThreemalD nurnller ph_onenuml:.>er, minutes, prov1ciessource.and • Avatarimage
iCl9udreturnsiftargethas effective•w;<1rrant;howe-ver, Tel~gr,unm ay creation email,IPaddressl, de5tinationforeachmeSSage •-Limitedr.ecordsofrecent
en?bled~ess~e:es_1r:i1Clo,ud Yicjen,pictur.e,fifes,location, discl0selPaddress •· Q.;it¢{n:c:itirue} whicbisretainedfor change:itoaccount-sf:tting
phone call audio and other and phone of l;_istl_o.gin as_longasthe ~lftargetisusingari i.Phone such as adding or-suspending
suchdatawillnotbe numberto account is active andiCloud bac~ups en.abled, a,d-1Nice(r;loes-notind-1,Jde
disclose.d) releva11t 1Clo_u.dretl!nJsmaycontain messageumtentorrouting
authont1es WhatsAppdata,toinclude anddelive.ryioformatiop)
mess.agec ontent -11 Wickr Version Number
PE= Q GI AA,
~ ~
SUBSCRIBER MESSAGES ENDER- DEVICE IP ENCRYPTION DATE/TIME REG1SfRATIDN USER'S
QATA RECEIVEDR ATA BACKUP ADDRESS KEY(SJ INFORMATION TIMEDAT:A CON1'ACTS
1 (U// LES)A pple provided logs only identify if a lookup occurred.A pple returns inciludea dfsclaimert hat a log entry betwten.partie.s does notiridkatea convers:aticintookp laCeT. hese.query logs have also ,containede rrors,
w(Uit)h LaA nWe eEdN tFa OkRnoCw:E, ~DEisNtrTiSb EutNioSnJ 'ib;JeVyEoTn:, bd et ih.n1f?oSrmee nattijtoiensr nw;iirtkheodu t (UFB/ /I ~a~u~th ojnri zt:hait~io ldl qiesu pmroehnitb,ii~te tdh.e Pprreoip:;eau:rt:ito}n'o sf ~sBblm atldn 9b"le ll pta.yk ebne ftlois tennbsuu.rtee _tJd"r )is!i tinhfionr mthaet ioFne clies, is:-t:4odor evd.~ apnmde/ notr . d(aen-sdtr iaty;se \d~ nintr aa..mc ~apnrnse)r,U -thSaj nt ~pJ~reig.d~undcees, l auwna uetnhfoorriczeedm ~anet~, peussb.lI in,~fo sramf~attiyo no.r pbrei;a,tdencgtitqhne oJff,iEciSac lsa vaenadt miJ1ady ivniodt, ubael s
m;(;!din l.i;g-4-i·prm:ee(ijl)gS'"withuutfin.treceivingq.uthorizatiunfromt he origiuatingc1g.eneyR, ecipieuµ; .µ-ep rohibited from sut>st:q¼entlpy l'.1st.inithei nfoniJ.ati.011.11'.)#r!k....eKdSo o ;:1w-ebsiteo rM uni;lassified.nc:twork
UNCLASSIFIED//LAWE NFORCEMENTS ENSITIVE
Shapiro 6 - Email Search Results - Installment 3 - Part 4 000548