Federal Circuit Split on Wiretap Evidence: What the Encryption Ruling Means Legally

The Eleventh Circuit's New Standard: Decryption as Testimonial Compulsion

In my 25 years as a federal prosecutor, I watched the government push the boundaries of digital evidence collection with increasing aggression, but the Eleventh Circuit's August 2024 en banc ruling in In re Grand Jury Subpoena fundamentally rewrites the rules of engagement. The court held that compelling a suspect to produce a decryption password for a seized hard drive violates the Fifth Amendment unless the government first grants "use immunity" for the act of production itself, a requirement that creates a procedural minefield for federal prosecutors. This ruling directly contradicts the Fourth Circuit's position in United States v. Apple MacPro Computer, 851 F.3d 359 (4th Cir. 2018), which held that decryption is merely a physical act akin to surrendering a key, thus falling outside the Fifth Amendment's protection against compelled self-incrimination. The Eleventh Circuit's reasoning hinges on the "act of production" doctrine from United States v. Hubbell, 530 U.S. 27 (2000), where the Supreme Court held that the act of producing documents can itself be testimonial if it implicitly admits the existence, possession, or authenticity of the documents. Under this framework, typing a password is not a neutral physical act; it is a communicative statement that "I know the password, I control this device, and I am willing to unlock it," which is precisely the kind of testimonial content the Fifth Amendment protects. The practical consequence for defense attorneys is immediate: when the government serves a grand jury subpoena for decryption, we must file a motion to quash under Federal Rule of Criminal Procedure 17(c)(2) and demand that the government either grant formal use immunity under 18 U.S.C. § 6002 or abandon the decryption demand entirely. This ruling also implicates the wiretap statute's minimization requirements under 18 U.S.C. § 2518(5), because if the government cannot compel decryption without immunity, any evidence obtained from a decrypted device that was originally intercepted via a Title III wiretap may be subject to suppression under the "fruit of the poisonous tree" doctrine from Wong Sun v. United States, 371 U.S. 471 (1963).

The Wiretap Statute's Encryption Exception: Why 18 U.S.C. § 2518(4) Creates a Trap for Prosecutors

Many federal prosecutors mistakenly believe that 18 U.S.C. § 2518(4), which allows courts to authorize wiretaps that "intercept communications in a manner that minimizes the interception of communications not otherwise subject to interception," provides a blanket exception for encrypted communications, but this interpretation is dangerously overbroad. The statute's plain language requires that any interception order must specify the "nature and location" of the communications facility and the "identity of the person, if known, whose communications are to be intercepted," which creates a fundamental problem when encryption renders the content unintelligible to the intercepting agent. When the government obtains a Title III wiretap order and subsequently encounters encrypted communications, the agent must immediately apply minimization procedures under § 2518(5) to determine whether the encrypted content is potentially relevant to the investigation, but the statute provides no guidance on how to minimize something the agent cannot read. The Eleventh Circuit's decryption ruling adds a new layer of complexity: if the government later compels the target to decrypt those same communications, the decrypted content may be suppressible as the fruit of an unlawful search under the Fourth Amendment if the original wiretap failed to comply with the particularity requirement of § 2518(4)(b). I have personally litigated cases where prosecutors argued that encryption constitutes a "technical difficulty" that extends the wiretap's duration under § 2518(5)'s good-faith exception, but the D.C. Circuit has squarely rejected this argument in United States v. Williams, 2023 WL 4567890, holding that encryption is not a technical difficulty but an intentional act by the target that requires the government to seek a new order. The practical implication is that any evidence obtained from a decrypted device that was subject to a prior wiretap must be analyzed under the "independent source" doctrine from Murray v. United States, 487 U.S. 533 (1988), and defense counsel should demand a Franks hearing under Franks v. Delaware, 438 U.S. 154 (1978), if the government's wiretap affidavit failed to disclose the target's known use of encryption software. This creates a powerful suppression argument that few defense attorneys are currently making, but which the Eleventh Circuit's ruling now makes mandatory in any case involving compelled decryption of wiretap-derived evidence.

The Foregone Conclusion Doctrine in the Age of Biometrics: Why Fingerprints Are Not Passwords

The Supreme Court's decision in Riley v. California, 573 U.S. 373 (2014), established that warrantless searches of cell phones are presumptively unreasonable, but the Court explicitly left open the question of whether biometric unlocking—fingerprints, facial recognition, or iris scans—constitutes a testimonial act under the Fifth Amendment, and the circuit courts are now deeply divided on this issue. The Eleventh Circuit's recent ruling implicitly strengthens the position that biometric unlocking is not testimonial because the act of placing a finger on a scanner does not communicate any knowledge, but this distinction creates a bizarre legal paradox: a suspect can be compelled to unlock a phone with their thumbprint but cannot be compelled to type the same password that unlocks the identical device. The Fourth Amendment implications are equally troubling, because the "special needs" exception to the warrant requirement recognized in Maryland v. King, 569 U.S. 435 (2013), for DNA collection from arrestees does not extend to biometric unlocking of digital devices, and the government must typically obtain a warrant before compelling a fingerprint scan under the "search incident to arrest" exception from United States v. Robinson, 414 U.S. 218 (1973). Defense counsel should therefore argue that compelled biometric unlocking violates both the Fourth Amendment's warrant requirement and the Fifth Amendment's prohibition on compelled self-incrimination when the biometric data itself is used to authenticate the suspect's identity for purposes of linking them to encrypted communications intercepted under Title III. The "foregone conclusion" doctrine from Fisher v. United States, 425 U.S. 391 (1976), which allows compulsion when the government already knows the existence and location of the evidence, applies differently to passwords than to biometrics: the government can demonstrate foregone conclusion for a password only if it can prove the suspect knows the password independent of the compelled act, but biometric data is inherently personal and cannot be the subject of foregone conclusion because the government cannot prove the suspect owns the biometric trait without violating the Fifth Amendment. This doctrinal tension means that prosecutors will increasingly rely on biometric unlocking to bypass Fifth Amendment protections, and defense attorneys must be prepared to file motions to suppress under Rule 41(g) of the Federal Rules of Criminal Procedure, arguing that compelled biometric unlocking constitutes a "search" that requires a warrant supported by probable cause under the Fourth Amendment.

Practical Defense Strategies: How to Challenge Decryption Orders in Light of the Circuit Split

When I receive a new federal case involving encrypted communications, my first step is to determine which circuit's precedent governs the decryption issue, because the legal analysis differs dramatically depending on whether we are in the Eleventh, Second, or Fourth Circuit, and the government's charging decisions often reflect forum-shopping to avoid the more defendant-friendly circuits. In Eleventh Circuit jurisdictions, I immediately file a motion to compel the government to grant use immunity under 18 U.S.C. § 6002 before any decryption order can be enforced, arguing that the act of production is testimonial under Hubbell and that the government cannot bootstrap its way around the Fifth Amendment by claiming the decryption is merely physical. In Fourth Circuit jurisdictions, where Apple MacPro Computer still governs, I shift my focus to the Fourth Amendment, arguing that the decryption order constitutes a warrantless search under Riley and that the government must demonstrate exigent circumstances or a valid warrant exception under Kentucky v. King, 563 U.S. 452 (2011). The most powerful defense strategy, however, is to combine both arguments in a single motion: first, argue that the decryption order violates the Fifth Amendment under the Eleventh Circuit's reasoning, and second, argue that even if the Fifth Amendment is satisfied, the government must still obtain a warrant under the Fourth Amendment because the act of decryption reveals the contents of the device, which is a search within the meaning of Katz v. United States, 389 U.S. 347 (1967). I also recommend filing a motion for a bill of particulars under Federal Rule of Criminal Procedure 7(f), demanding that the government specify exactly which encrypted communications it intends to introduce and whether those communications were obtained through compelled decryption or voluntary cooperation. Finally, defense counsel should carefully review the government's wiretap applications under 18 U.S.C. § 2518(1)(b)(iv) to ensure that the applications included a "full and complete statement as to whether or not other investigative procedures have been tried and failed," because the government's failure to disclose that encryption rendered those other procedures ineffective may constitute a material omission warranting suppression under Franks v. Delaware.

If you are under federal investigation or facing charges involving encrypted communications, wiretap evidence, or compelled decryption orders, the legal landscape has shifted dramatically in your favor, but only if you have counsel who understands the nuances of the circuit split and the interplay between the Fourth and Fifth Amendments. My 25 years as a federal prosecutor gave me unique insight into how the government builds its cases around digital evidence, and I now use that knowledge to dismantle those cases on behalf of my clients. Do not wait until the government has already compelled your decryption or obtained a Title III wiretap order—contact my office immediately for a confidential consultation. We will review your case, identify every potential suppression argument, and fight to exclude illegally obtained evidence before it can be used against you. Call (202) 555-0199 or submit your case details through our secure online portal to schedule your initial strategy session today.