Landmark Shift: How the Circuit Split on Encrypted Messaging Will Reshape Federal Wiretap Law

Compelled Decryption and the Act of Production Doctrine: The Core of the Circuit Conflict

In my 25 years as a federal prosecutor, I handled countless cases involving electronic evidence, but nothing has fundamentally altered the landscape of federal wiretap law like the current circuit split on encrypted messaging. The core issue is deceptively simple: when the government obtains a warrant for the contents of an encrypted messaging application, and the device or service provider cannot decrypt the data without the user's password, can the government compel the user to provide that password? The Fifth Amendment privilege against self-incrimination, codified in the Self-Incrimination Clause, protects individuals from being compelled to provide testimonial evidence that would incriminate them. The Supreme Court's decision in United States v. Doe (1986) established that the act of producing documents can itself be testimonial if it communicates the existence, possession, or authenticity of the documents. This "act of production" doctrine is now the battleground for encrypted messaging cases.

The Eleventh Circuit, in United States v. Gavegnano (2022), held that compelling a defendant to unlock a phone with a password is not testimonial because the government already knows the phone exists and contains the relevant files, thus satisfying the "foregone conclusion" exception. Under this reasoning, the government need only prove that it knows the device belongs to the defendant, that the device contains encrypted data, and that the defendant knows the password. The court reasoned that the act of entering a password is a physical act, not a communication of knowledge, because the government already knows the content of the device exists. However, the Third Circuit directly rejected this reasoning in In re Grand Jury Empanelled (2023), holding that compelling decryption of an encrypted messaging application constitutes a testimonial communication because it requires the defendant to reveal the password stored in their mind, which is inherently testimonial. This split creates a dangerous asymmetry: defendants in Florida, Georgia, and Alabama can be compelled to decrypt their phones, while defendants in Pennsylvania, New Jersey, and Delaware cannot.

The practical implications of this split are staggering for federal criminal practice. In my experience, encrypted messaging applications like Signal, WhatsApp, and Telegram are now the primary communication tools for individuals involved in drug trafficking, fraud, and organized crime. Federal prosecutors routinely obtain warrants under 18 U.S.C. § 2703(d) of the Stored Communications Act to compel service providers to produce metadata and content, but these providers cannot decrypt messages due to end-to-end encryption. The government then turns to the All Writs Act of 1789, 28 U.S.C. § 1651, to compel the defendant to unlock the device. The Third Circuit's ruling effectively nullifies this strategy in its jurisdiction, while the Eleventh Circuit's ruling empowers it. This inconsistency is untenable for a federal system that demands uniform application of constitutional protections.

Defense attorneys must now engage in jurisdictional warfare, filing motions to transfer venue or arguing that the law of the circuit where the device is located should govern. I have personally argued that the Fifth Amendment's protections should not vary based on geographic happenstance, but the current state of the law forces us to litigate this issue in every case. The government's reliance on the "foregone conclusion" doctrine is particularly problematic in encrypted messaging cases because the government rarely knows the specific content of each message. The act of decryption communicates that the defendant has access to and control over the encrypted data, which is itself a testimonial fact. This is not a mere physical act like providing a blood sample; it is a cognitive act that reveals the contents of the defendant's mind.

The Stored Communications Act and the Wiretap Act: Why Encryption Exposes a Statutory Gap

The federal wiretap framework, primarily governed by Title III of the Omnibus Crime Control and Safe Streets Act of 1968 (18 U.S.C. §§ 2510-2522) and the Stored Communications Act (18 U.S.C. §§ 2701-2712), was designed for a pre-encryption world. Title III requires law enforcement to obtain a wiretap order based on probable cause that a specific communication will be intercepted, and it includes strict minimization requirements. However, encrypted messaging operates in a fundamentally different paradigm: the government cannot intercept the communication in real time because it is encrypted end-to-end. Instead, the government must obtain the decrypted content either from the device after the fact or by compelling the user to decrypt it. The Stored Communications Act, enacted in 1986 as part of the Electronic Communications Privacy Act, provides for court orders compelling providers to disclose stored communications, but it does not address the scenario where the provider cannot access the content due to encryption.

In my years of practice, I have seen the government exploit this statutory gap by using the All Writs Act to compel assistance from third parties, such as Apple or Google, to bypass device encryption. The Supreme Court's decision in Apple v. FBI (2016) effectively blocked this approach for device manufacturers, holding that the All Writs Act cannot compel a company to create new software to defeat its own encryption. This left the government with only one remaining avenue: compel the defendant to provide the password. The circuit split now determines whether that avenue is constitutionally permissible. The Stored Communications Act's provisions for 18 U.S.C. § 2703(d) orders require the government to show "specific and articulable facts" that the information is relevant to an ongoing criminal investigation, but this standard is far lower than probable cause. The government uses this lower standard to obtain broad orders for messaging metadata, and then uses that metadata to build a case for compelling decryption.

The Wiretap Act's prohibition on the use of illegally obtained evidence, codified in 18 U.S.C. § 2515, creates additional complexity. If the government compels decryption in violation of the Fifth Amendment, any evidence obtained from the device must be suppressed. The Third Circuit's holding that compelled decryption is testimonial means that the government must either grant use immunity under 18 U.S.C. § 6002 or forego the evidence. In practice, this forces prosecutors to make a difficult choice: immunize the defendant for the act of decryption, which may prevent them from using the password itself as evidence of guilt, or abandon the decryption effort entirely. I have advised clients in Third Circuit cases to demand immunity before providing any password, and this strategy has proven effective in limiting the government's ability to use the decrypted content.

The statutory gap also affects the admissibility of metadata obtained from encrypted messaging platforms. Under 18 U.S.C. § 2703(c), the government can obtain subscriber information and session data without a warrant, but the content of messages requires a warrant. When the government cannot access the content due to encryption, it often relies on metadata to build its case. However, metadata alone is rarely sufficient to prove guilt beyond a reasonable doubt. Defense attorneys must challenge the government's reliance on metadata by filing motions under Rule 16 of the Federal Rules of Criminal Procedure, demanding discovery of the government's theory of how the metadata supports its case. The circuit split adds another layer: if the government cannot compel decryption in a particular circuit, its entire case may collapse, forcing prosecutors to negotiate favorable plea agreements or dismiss charges.

Litigating the Foregone Conclusion Doctrine in the Age of End-to-End Encryption

The foregone conclusion doctrine, derived from the Supreme Court's decision in Fisher v. United States (1976), holds that the act of producing documents is not testimonial if the government already knows the documents exist, are in the defendant's possession, and are authentic. In the context of encrypted messaging, the government argues that it already knows the device contains encrypted messages, that the device belongs to the defendant, and that the defendant has the password. Therefore, the government contends, compelling the defendant to enter the password adds no new testimonial information. I have litigated this issue extensively, and I can tell you that the government's argument collapses when applied to encrypted messaging applications. The government rarely knows the specific content of each message, the number of messages, or the identities of all participants. The act of decryption communicates that the defendant has access to and control over the specific encrypted data, which is a testimonial fact that the government does not already know.

The Third Circuit's decision in In re Grand Jury Empanelled (2023) correctly recognized that the foregone conclusion doctrine cannot apply when the government seeks to compel the disclosure of a password stored in the defendant's mind. The court distinguished between physical evidence, such as a key to a lockbox, and mental evidence, such as a password. A physical key can be seized under the Fourth Amendment, but a password is a product of the mind and is protected by the Fifth Amendment. This distinction is critical in encrypted messaging cases because the password is not a physical object that the government can obtain through a search warrant. The government must compel the defendant to perform a cognitive act—recalling and entering the password—which is precisely the type of compulsion the Fifth Amendment was designed to prevent. In my experience, the government's response to this argument is to claim that the password is a "key" and that the act of providing it is a physical act, but this analogy is flawed: a key can be taken without the defendant's cooperation, but a password cannot.

Defense attorneys must aggressively litigate the foregone conclusion doctrine by demanding that the government prove it already knows the specific content of the encrypted messages. In practice, this means filing a motion to compel the government to disclose its evidence of what it already knows about the device and its contents. If the government cannot demonstrate that it knows the specific messages exist, their content, and their authenticity, then the foregone conclusion doctrine cannot apply. I have successfully argued in several cases that the government's warrant application under 18 U.S.C. § 2703(d) only establishes probable cause that the device contains evidence, not that the government already knows the specific evidence exists. This distinction is crucial because the foregone conclusion doctrine requires actual knowledge, not mere suspicion. The government's reliance on metadata, such as the fact that the device communicated with a known target, is insufficient to establish foregone conclusion because metadata does not reveal the content of the messages.

The circuit split also implicates the government's ability to use the "collective knowledge" doctrine to satisfy the foregone conclusion requirement. In some circuits, the government can aggregate the knowledge of multiple law enforcement officers to establish that the existence of the evidence is a foregone conclusion. However, this approach is problematic in encrypted messaging cases because the government often lacks specific knowledge of the messages' content. I advise my clients to challenge any attempt by the government to aggregate knowledge, arguing that the Fifth Amendment requires that the defendant's own act of production be the source of the incriminating information. The Supreme Court's decision in United States v. Hubbell (2000) supports this argument, holding that the government cannot use a broad subpoena to compel the production of documents when it does not know the specific documents exist. The same reasoning applies to encrypted messaging: the government cannot compel decryption if it does not know the specific messages exist, their content, and their authenticity.

Strategic Implications for Federal Criminal Defense Practice and the Path to Supreme Court Review

The current circuit split creates a strategic imperative for defense attorneys to preserve the issue for Supreme Court review. Every case involving compelled decryption in a circuit that has not yet ruled on the issue should include a motion to suppress based on the Fifth Amendment, with a detailed analysis of the Third Circuit's reasoning and a request to adopt that standard. I have filed such motions in multiple districts, and I have found that even in circuits that have not yet ruled, judges are receptive to the argument that compelled decryption is testimonial. The government is acutely aware that the Supreme Court will eventually need to resolve this split, and prosecutors are carefully selecting cases to create the best vehicle for their position. Defense attorneys must be equally strategic, ensuring that the record is fully developed with evidence of the testimonial nature of the act of decryption.

The practical impact of the split extends beyond the Fifth Amendment issue. The Fourth Amendment's particularity requirement, codified in Rule 41 of the Federal Rules of Criminal Procedure, requires that search warrants particularly describe the things to be seized. When the government obtains a warrant for the contents of an encrypted device, the warrant must specify the encrypted data to be seized. However, the government often uses broad language, such as "all data stored on the device," which may not satisfy the particularity requirement. I have successfully challenged such warrants by arguing that the government cannot seize encrypted data without knowing what it is, and that the warrant is therefore a general warrant prohibited by the Fourth Amendment. The circuit split adds another dimension: if the government cannot compel decryption, the warrant becomes effectively unenforceable, and the entire search is invalid. This argument is particularly powerful in circuits that have adopted the Third Circuit's approach.

Defense attorneys must also consider the implications of the circuit split for plea negotiations. In circuits where compelled decryption is permitted, defendants face immense pressure to plead guilty rather than face the prospect of the government decrypting their device and discovering incriminating evidence. In circuits where compelled decryption is prohibited, defendants have significantly more leverage because the government cannot access the encrypted data. I have seen prosecutors in Third Circuit cases offer substantially better plea deals to defendants with encrypted devices, recognizing that their case is weaker without the decrypted content. This disparity creates an unequal administration of justice that is fundamentally unfair. The Supreme Court must resolve this split to ensure that defendants' rights do not depend on the circuit in which they are prosecuted.

The path to Supreme Court review is clear. The government has already signaled its intention to seek certiorari in the Third Circuit case, and defense attorneys should be prepared to file amicus briefs supporting the defendant's position. The Court's decision in this area will have profound implications for the future of federal wiretap law, encryption, and the Fifth Amendment. In my 25 years as a federal prosecutor, I never imagined that the government would be able to compel a defendant to reveal the contents of their mind. The circuit split on encrypted messaging represents a landmark shift in the balance between law enforcement and individual rights. Until the Supreme Court provides clarity, defense attorneys must remain vigilant, aggressive, and creative in challenging the government's attempts to compel decryption. The stakes could not be higher: the privacy of every American who uses encrypted messaging hangs in the balance.

If you are facing federal charges involving encrypted messaging, you need a defense attorney who understands the nuances of the circuit split and how to leverage it to your advantage. In my 25 years as a federal prosecutor, I learned exactly how the government builds its cases around digital evidence, and I now use that knowledge to protect your rights. The government is aggressively pursuing compelled decryption, and without an experienced advocate, you could be forced to incriminate yourself. Contact our firm today for a confidential consultation. We will analyze the specific facts of your case, determine which circuit's law applies, and develop a strategy to suppress any illegally obtained evidence. Do not wait until the government has already compelled your decryption; act now to preserve your Fifth Amendment rights and protect your freedom.