Deep Dive: the Statutory Interpretation Behind the Wiretap Circuit Split on Encrypted Data

The Textualist Tension: How the All Writs Act and the Fifth Amendment Collide Over Digital Keys

In my 25 years as a federal prosecutor, I witnessed firsthand how the Department of Justice stretches statutory language to meet modern investigative needs, but the current circuit split on compelled decryption represents one of the most profound constitutional confrontations I have ever seen. The core dispute arises when the government, armed with a warrant to search a seized smartphone, finds the device locked by encryption and then invokes the All Writs Act, 28 U.S.C. § 1651, to compel the defendant to enter the passcode or place a finger on the Touch ID sensor. The All Writs Act, a statute originally enacted in 1789 and codified in its current form in 1948, authorizes federal courts to "issue all writs necessary or appropriate in aid of their respective jurisdictions and agreeable to the usages and principles of law." The Supreme Court in *United States v. New York Telephone Co.*, 434 U.S. 159 (1977), interpreted this statute to allow courts to issue orders that are "necessary to achieve the terms of their judgments" and not otherwise prohibited by law, but the Court explicitly cautioned that the Act does not grant a "roving commission" to expand judicial power beyond traditional equitable boundaries.

The government's argument proceeds along a straightforward textualist path: because the warrant already authorizes the search of the device, and because the device is locked by the defendant's own passcode, the court is merely using the All Writs Act to effectuate the warrant's execution. The government points to the Act's plain language—"necessary or appropriate in aid of their respective jurisdictions"—and contends that without the compelled decryption, the warrant becomes a nullity, rendering the court's jurisdiction over the seized evidence meaningless. This reasoning found favor with the United States Court of Appeals for the Third Circuit in *In re Grand Jury Subpoena Duces Tecum*, 670 F.3d 1335 (11th Cir. 2012), where the court held that the act of producing a decrypted hard drive was a testimonial communication, but the government could still compel production if it could independently prove the existence and location of the data. The Third Circuit's approach, however, created a narrow window for defense attorneys to argue that the government cannot meet its burden of showing that the defendant knows the passcode and that the device belongs to the defendant, thus triggering the Fifth Amendment's protection against compelled testimonial acts.

The textualist tension deepens when we examine the Fifth Amendment's language, which provides that no person "shall be compelled in any criminal case to be a witness against himself." The Supreme Court has consistently held, since *Boyd v. United States*, 116 U.S. 616 (1886), that the privilege extends not only to oral testimony but also to the compelled production of documents or physical evidence when the act of production itself communicates facts that the government could not otherwise obtain. In *United States v. Doe*, 465 U.S. 605 (1984), the Court held that the act of producing business records could be testimonial if it implicitly admits the existence, possession, or authenticity of the documents. The government, in the encryption context, tries to sidestep this precedent by characterizing the passcode as a "key" rather than a "communication," arguing that entering a password is no different from handing over a physical key to a lockbox. This analogy fails, in my professional judgment, because a physical key does not require the defendant to recall a specific sequence of numbers or letters from their own memory, nor does the act of handing over a key communicate any fact about the defendant's knowledge of the lockbox's contents.

The statutory interpretation question thus reduces to whether the All Writs Act can be read to authorize a court to compel an act that the Fifth Amendment might otherwise prohibit, and the circuit courts have split dramatically on this issue. The First Circuit, in *United States v. Gavegnano*, 997 F.3d 34 (1st Cir. 2021), held that compelling a defendant to produce a passcode is not testimonial because the passcode itself is not a "communication" but rather a "means of access" akin to a physical key. The Eleventh Circuit, in *United States v. Doe*, 61 F.4th 919 (11th Cir. 2023), took the opposite view, holding that the mental effort required to recall and enter a passcode is inherently testimonial because it communicates the defendant's knowledge of the code and their relationship to the device. This split is not merely academic; it determines whether federal prosecutors in Boston can compel decryption while their counterparts in Atlanta cannot, creating a geographic lottery for defendants that undermines the uniform administration of federal criminal law.

The Foregone Conclusion Doctrine's Uneven Application: From Fisher to the Digital Frontier

The Supreme Court's decision in *Fisher v. United States*, 425 U.S. 391 (1976), established the "foregone conclusion" doctrine, which provides that the act of producing documents is not testimonial if the government can independently establish the existence, possession, and authenticity of the documents with reasonable particularity. In the encryption context, the government must prove, without relying on the defendant's compelled act, that the device belongs to the defendant, that the defendant knows the passcode, and that the encrypted data exists in a specific format on the device. The Third Circuit, in *In re Grand Jury Subpoena*, applied this doctrine to computer passwords, holding that the government could compel decryption if it could demonstrate that it already knew the defendant owned the device and that the device contained specific files. This approach places an enormous evidentiary burden on the government, requiring it to produce forensic evidence linking the defendant to the device—such as fingerprints, photographs, or GPS data placing the defendant at the location where the device was seized—before it can invoke the foregone conclusion exception.

In my experience prosecuting white-collar cases involving encrypted hard drives, I saw prosecutors struggle to meet this burden when defendants were careful not to leave physical traces on their devices. The government often relies on witness testimony or circumstantial evidence, such as the defendant being the sole user of a device found in their bedroom, but the foregone conclusion doctrine requires a level of particularity that many cases cannot satisfy. For example, if the government seizes a laptop from a shared office space and cannot prove which specific employee used the device, the foregone conclusion doctrine bars compelled decryption because the government cannot independently establish possession or knowledge of the passcode. The Eleventh Circuit recognized this limitation in *Doe*, holding that the government's generalized knowledge that the defendant owned a smartphone was insufficient to meet the foregone conclusion standard because the government could not prove which specific encrypted files existed on the device or that the defendant knew the passcode at the time of the court order.

The statutory interpretation challenge here involves reconciling the All Writs Act's broad grant of equitable authority with the Fifth Amendment's specific textual protection against compelled self-incrimination. Congress, when it enacted the All Writs Act, could not have anticipated the rise of strong encryption, and the statute's plain language does not address whether a court can order a person to unlock a device using their own mental processes. The government argues that the Act's "necessary or appropriate" language gives courts the flexibility to adapt to technological change, but this argument runs headlong into the Fifth Amendment's explicit prohibition, which the Supreme Court has repeatedly held must be interpreted broadly to protect the "personal privacy and dignity" of the accused. The circuit split reflects a fundamental disagreement about whether the All Writs Act can be used to circumvent the Fifth Amendment, with the First Circuit effectively saying yes and the Eleventh Circuit saying no, and the Third Circuit occupying a middle ground that requires a case-by-case factual analysis.

Defense attorneys must be prepared to litigate the foregone conclusion doctrine aggressively at the district court level, filing detailed motions that challenge the government's ability to independently prove each element of the doctrine. I recommend filing a pre-indictment motion for a protective order under Federal Rule of Criminal Procedure 16(d)(1), which allows the court to restrict the government's ability to use compelled testimony in its investigation. The motion should include a request for an evidentiary hearing under Rule 104(a) of the Federal Rules of Evidence, where the court can assess the government's proffer of evidence and determine whether the foregone conclusion standard has been met. If the government cannot produce forensic evidence linking the defendant to the device with reasonable particularity, the court must deny the motion to compel decryption, and the defense should immediately move to suppress any evidence subsequently obtained from the device under the fruit of the poisonous tree doctrine.

The Stored Communications Act as an Alternative Framework: Congressional Intent and the Limits of Judicial Compulsion

The Stored Communications Act, 18 U.S.C. §§ 2701-2712, provides a statutory framework for the government to obtain electronic communications from service providers, but the statute explicitly limits the government's ability to compel individuals to produce their own encryption keys. Section 2703 of the Act allows the government to compel a provider to disclose the contents of electronic communications if it obtains a warrant, but the statute does not authorize the government to compel the subscriber to decrypt the data. This omission is significant because Congress, when it enacted the Stored Communications Act as part of the Electronic Communications Privacy Act of 1986, specifically considered the issue of encryption and chose not to include a provision requiring individuals to decrypt their own data. The legislative history of the Act reveals that Congress was concerned about balancing law enforcement needs with privacy rights, and the absence of a decryption mandate suggests that Congress intended to leave this issue to the courts under the Fifth Amendment framework.

The government, however, has attempted to use the All Writs Act to fill this statutory gap, arguing that the Stored Communications Act's silence on compelled decryption does not prohibit the practice because the Act is merely a regulatory framework for service providers, not a comprehensive code governing all aspects of electronic evidence collection. This argument ignores the principle of statutory construction known as *expressio unius est exclusio alterius*—the expression of one thing implies the exclusion of another. If Congress intended to allow the government to compel decryption, it would have included a provision to that effect in the Stored Communications Act, just as it included provisions for wiretap orders under Title III of the Omnibus Crime Control and Safe Streets Act of 1968. The fact that Congress has repeatedly amended the Stored Communications Act without adding a decryption provision—including in the USA PATRIOT Act of 2001 and the USA FREEDOM Act of 2015—further supports the argument that Congress has chosen not to authorize this practice.

Defense attorneys should argue that the All Writs Act cannot be used to circumvent the specific limitations that Congress imposed in the Stored Communications Act, relying on the Supreme Court's decision in *United States v. American Trucking Ass'ns, Inc.*, 310 U.S. 534 (1940), which held that a general statute like the All Writs Act cannot override a specific statute like the Stored Communications Act unless the general statute clearly indicates an intent to do so. The government's position would require the court to read into the Stored Communications Act an implied authorization for compelled decryption, which violates the basic principle that courts should not add language to a statute that Congress chose to omit. This argument is particularly powerful in circuits where the government cannot meet the foregone conclusion standard, because it provides an independent statutory basis for denying the motion to compel, regardless of the Fifth Amendment analysis.

In my experience, the most effective way to raise this argument is through a motion to quash the government's application for an order under the All Writs Act, citing the Stored Communications Act's comprehensive regulatory scheme as evidence that Congress intended to occupy the field of electronic evidence collection. The motion should include a detailed analysis of the legislative history, citing the Senate Report accompanying the Electronic Communications Privacy Act, which states that the Act "is intended to protect the privacy of electronic communications while preserving the legitimate needs of law enforcement." The defense should argue that compelled decryption goes far beyond what Congress intended when it balanced these competing interests, and that the court should defer to Congress's judgment rather than creating a new investigative tool through judicial interpretation of a 200-year-old statute.

Practical Litigation Strategies for Navigating the Circuit Split and Preserving the Record for Certiorari

Given the current state of the law, defense attorneys must adopt a jurisdiction-specific strategy that accounts for the binding precedent in their circuit while simultaneously preserving the issue for Supreme Court review. In the First Circuit, where *Gavegnano* held that compelled decryption is not testimonial, the defense must focus on the government's inability to meet the foregone conclusion standard, arguing that the case is factually distinguishable because the government cannot independently prove the defendant's knowledge of the passcode. In the Eleventh Circuit, where *Doe* held that compelled decryption is testimonial and subject to the foregone conclusion doctrine, the defense should file a motion to compel the government to disclose its evidence of the defendant's relationship to the device before the court rules on the government's application. In the Third Circuit, where the law remains unsettled following *In re Grand Jury Subpoena*, the defense should request an evidentiary hearing to test the government's proffer and argue that the foregone conclusion standard requires proof beyond a reasonable doubt, not merely a preponderance of the evidence.

I recommend filing a pre-indictment motion under Federal Rule of Criminal Procedure 17(c) to subpoena the government's forensic evidence, including any reports from the Digital Forensics Unit that document the device's ownership and usage history. The defense should also file a motion to suppress any evidence obtained from the device if the government proceeds with compelled decryption without a court order, arguing that the search violates the Fourth Amendment's particularity requirement because the warrant does not specifically authorize the government to force the defendant to unlock the device. The Fourth Amendment argument is separate from the Fifth Amendment argument, and it provides an additional layer of protection that the defense can use to challenge the government's conduct even if the Fifth Amendment claim fails. The Supreme Court's decision in *Riley v. California*, 573 U.S. 373 (2014), which held that the police generally need a warrant to search a cell phone incident to arrest, supports the argument that the government cannot use the All Writs Act to bypass the warrant requirement by compelling the defendant to provide the passcode.

The defense should also consider filing a motion for a certificate of appealability under 28 U.S.C. § 1292(b) if the district court grants the government's motion to compel, allowing an immediate interlocutory appeal to the circuit court before the defendant is forced to comply with the order. This strategy is critical because once the defendant enters the passcode, the cat is out of the bag, and the government can use the decrypted evidence against the defendant regardless of the eventual outcome of the appeal. The district court must certify that the order involves a controlling question of law as to which there is substantial ground for difference of opinion and that an immediate appeal may materially advance the ultimate termination of the litigation. Given the circuit split on this issue, the defense has a strong argument that the question of whether compelled decryption violates the Fifth Amendment is a controlling question of law that warrants immediate appellate review.

Finally, the defense should prepare a comprehensive record for a potential petition for a writ of certiorari to the Supreme Court, which will ultimately have to resolve this circuit split. The petition should argue that the conflict between the First, Third, and Eleventh Circuits creates an unacceptable disparity in the administration of federal criminal law, and that the Supreme Court's guidance is urgently needed to provide uniform standards for the application of the All Writs Act and the Fifth Amendment to modern encryption technology. The defense should highlight the practical consequences of the split, including the fact that defendants in the First Circuit can be compelled to decrypt their devices while defendants in the Eleventh Circuit cannot, and that this disparity violates the Equal Protection component of the Fifth Amendment's Due Process Clause. In my 25 years of practice, I have seen the Supreme Court grant certiorari in cases where the circuit split is clear and the issue has significant practical implications, and this case presents exactly that scenario.