privacy encryption
Does travelling through the US border with encrypted files break the law?
<p>If I have encrypted files and I'm going to US, do I break any encryption import laws? Likewise, if I go out of US with those files, do I break any encryption export laws?</p>

<p>The <a href="https://en.wikipedia.org/wiki/Electronic_Frontier_Foundation" rel="nofollow noreferrer">Electronic Frontier Foundation</a>, a San Francisco-based digital rights non-profit, specifically advises to use encryption when crossing the US borders. Read more at <a href="https://www.eff.org/wp/digital-privacy-us-border-2017" rel="nofollow noreferrer">https://www.eff.org/wp/digital-privacy-us-border-2017</a>.</p>

<p>While the EFF doesn't say that using encryption would be illegal, keep in mind that the US borders are a gray area, legally-speaking, and <a href="https://motherboard.vice.com/en_us/article/qkvmvq/you-have-no-right-to-electronic-privacy-when-you-cross-the-us-border" rel="nofollow noreferrer">US Government agents have a wide range of powers</a> that would not be available elsewhere - within the US, or outside the US.</p>

<p>The EFF also advises this:</p>

<blockquote>
  <p>We appreciate and respect technologists’ efforts to find ways to help travelers protect their data. However, we recommend against using methods that may be, or even appear to be, calculated to deceive or mislead border agents about what data is present on a device. There is a significant risk that border agents could view deliberately hiding data from them as illegal. Lying to border agents can be a serious crime, and the agents may take a very broad view of what constitutes lying.11 We urge travelers to take that risk very seriously.</p>
</blockquote>

<p>Wikipedia's list of <a href="https://en.wikipedia.org/wiki/Restrictions_on_the_import_of_cryptography" rel="nofollow noreferrer">countries with restrictions on import of cryptography</a> does not include the United States of America. Their page on <a href="https://en.wikipedia.org/wiki/Export_of_cryptography_from_the_United_States" rel="nofollow noreferrer">export of crypography from the United States</a> has a list of currently restricted technologies, but files which have been encrypted are by themselves not technologies at all, just data that is the output of some technology.</p>

<p>If you have encryption <em>software</em> on that computer, that may still be subject to restrictions.</p>

<p>The "current status" section on the latter page has a "needs update" badge; but the technologies it currently lists are</p>

<blockquote>
  <p>Militarized encryption equipment, TEMPEST-approved electronics, custom cryptographic software, and even cryptographic consulting services</p>
</blockquote>

<p>So if you have <em>custom</em> decryption software, you are at risk, but bog-standard GPG should not be liable as per this documentation.</p>

<p>(I obviously am in no position to guarantee rational behavior from a country whose current administration seems hellbent on reviving the dark ages. This answer is in whole based on what I could find on Wikipedia, not on personal insights into the matter.)</p>
