under the rica act of 2002, refusal to disclose a cryptographic key in your possession could result in a fine up to zar 2 million or up to 10 years imprisonment. this requires a judge to issue a decryption direction to a person believed to hold the key.