While the vast majority of hackers may be disinclined towards violence, it would only take a few to turn cyber terrorism into reality.

I think most organizations have an interest in key recovery, at least with respect to stored data.

Although cyber attacks have caused billions of dollars in damage and affected the lives of millions, few if any can be characterised as acts of terrorism.

I favor strategies that encourage industry to include some sort of key recovery capability in their systems which would also address user requirements for access.

Systems are complex, so controlling an attack and achieving a desired level of damage may be harder than using physical weapons.

I don't have a particular recommendation other than that we base decisions on as much hard data as possible. We need to carefully look at all the options and all their ramifications in making our decisions.

While many hackers have the knowledge, skills, and tools to attack computer systems, they generally lack the motivation to cause violence or severe economic or social harm.