Yes, except in this case it appears that the defendant was using PGP on the device, and BB was not involved in the decryption effort at all. So either nation-state compromise of PGP itself (unlikely), or key compromise (more likely).<p>Edit: I wouldn&#x27;t dismiss compromise of PGP out of hand entirely, even though it sounds crazy. Both the judge and NFI denied the defense the ability to audit the NFI&#x27;s methods. I can&#x27;t imagine hamstringing the defense like this if it was a simple case of &quot;your dumbass client left his key in plaintext on the device&quot;. So there is a very slight fishy smell, here.