New Evidence of the NSA Deliberately Weakening Encryption
Posted by Tom Leinster
One of the most high-profile ways in which mathematicians are implicated in mass surveillance is in the intelligence agencies’ deliberate weakening of commercially available encryption systems — the same systems that we rely on to protect ourselves from fraud, and, if we wish, to ensure our basic human privacy.
We already knew quite a lot about what they’ve been doing. The NSA’s 2013 budget request asked for funding to “insert vulnerabilities into commercial encryption systems”. Many people now know the story of the Dual Elliptic Curve pseudorandom number generator, used for online encryption, which the NSA aggressively and successfully pushed to become the industry standard, and which has weaknesses that are widely agreed by experts to be a back door. Reuters reported last year that the NSA arranged a secret $10 million contract with the influential American security company RSA (yes, that RSA), who became the most important distributor of that compromised algorithm.
In the August Notices of the AMS, longtime NSA employee Richard George tried to suggest that this was baseless innuendo. But new evidence published in The Intercept makes that even harder to believe than it already was. For instance, we now know about the top secret programme Sentry Raven, which
works with specific US commercial entities … to modify US manufactured encryption systems to make them exploitable for SIGINT [signals intelligence].
(page 9 of this 2004 NSA document).
The Intercept article begins with a dramatic NSA-drawn diagram of the hierarchy of secrecy levels. Each level is colour-coded. Top secret is red, and above top secret (these guys really give it 110%) are the “core secrets” — which, as you’d probably guess, are in black. From the article:
the NSA’s “core secrets” include the fact that the agency works with US and foreign companies to weaken their encryption systems.
(The source documents themselves are linked at the bottom of the article.)
It’s noted that there is “a long history of overt NSA involvement with American companies, especially telecommunications and technology firms”. Few of us, I imagine, would regard that as a bad thing in itself. It’s the nature of the involvement that’s worrying. The aim is not just to crack the encrypted messages of particular criminal suspects, but the wholesale compromise of all widely used encryption methods:
The description of Sentry Raven, which focuses on encryption, provides additional confirmation that American companies have helped the NSA by secretly weakening encryption products to make them vulnerable to the agency.
The documents also appear to suggest that NSA staff are planted inside American security, technology or telecomms companies without the employer’s knowledge. Chris Soghoian, principal technologist at the ACLU, notes that “As more and more communications become encrypted, the attraction for intelligence agencies of stealing an encryption key becomes irresistible … It’s such a juicy target.”
Unsurprisingly, the newly-revealed documents don’t say anything specific about the role played by mathematicians in weakening digital encryption. But they do make it that bit harder for defenders of the intelligence agencies to maintain that their cryptographic efforts are solely directed against the “bad guys” (a facile distinction, but one that gets made).
In other words, there is now extremely strong documentary evidence that the NSA and its partners make strenuous efforts to compromise, undermine, degrade and weaken all commonly-used encryption software. As the Reuters article puts it:
The RSA deal shows one way the NSA carried out what Snowden’s documents describe as a key strategy for enhancing surveillance: the systematic erosion of security tools.
The more or less explicit aim is that no human being is able to send a message to any other human being that the NSA cannot read.
Let that sink in for a while. There is less hyperbole than there might seem when people say that the NSA’s goal is the wholesale elimination of privacy.
This evening, I’m going to see Laura Poitras’s film Citizenfour (trailer), a documentary about Edward Snowden by one of the two journalists to whom he gave the full set of documents. But before that, I’m going to a mathematical colloquium by Trevor Wooley, Strategic Director of the Heilbronn Institute — which is the University of Bristol’s joint venture with GCHQ. I wonder how mathematicians like him, or young mathematicians now considering working for the NSA or GCHQ, feel about the prospect of a world where it is impossible for human beings to communicate in private.
Re: New Evidence of the NSA Deliberately Weakening Encryption
I am a pure mathematician connected to one of the institutes named in this post; one who is deeply concerned by the NSA revelations and who regards the primary players in Citizenfour (E.S., G.G., L.P.) as inspirational heroes.
The last part of your post is something I have often wondered about as I go about my professional life. In a sense it is connected to a much larger question:
Is it morally admissible for me to have a relationship with an entity that engages in other activities I consider morally wrong?
This is a question with no easy answers. My personal view is that this is something individuals must figure out for themselves.
Consider the following (decreasing) levels of involvement a mathematician might have with the NSA/GCHQ. Admittedly, there are a lot of possible scenarios, and I only mention a few. For example, being strategic director of the Heilbronn Institute probably falls around 2.
Work for them whether as a contractor (like Snowden) or directly.
Receive direct grants from the NSA/GCHQ to perform (non-classified, publicly disseminated) mathematical research.
Attend a conference that received a part of its funding from the NSA/GCHQ. (equivalently, attend or organize a seminar in number theory whose budget indirectly has a component coming from the NSA/GCHQ)
Many mathematicians who oppose a large part of the NSA’s activities (e.g., in sabotaging encryption) would never do 1, but I think would be ok with 2 and 3. Personally, I will not do 2 either, but I will partake in 3 (fwiw, with some degree of discomfort).
Thus, while I will not apply for a research grant from the NSA or GCHQ or otherwise engage with them directly (and I wouldn’t dream of working for them except for the express purpose of leaking their misdeeds), I would not stop being involved with seminars, conferences etc in my field which happen to get some part of its funding from the NSA/GCHQ.
Is this somewhat arbitrary line I have drawn a moral error on my part? I do not know. What about an artist agreeing to an award or a grant from a democratic government (e.g. the USA) that sometimes engages in horrific wars killing thousands of people? What about a person receiving social security payments while simultaneously believing that the economy would run much better if the government spent much less money?
So, coming back to your last sentence. If you were to ask someone like me what I feel about the prospect of a world where it is impossible for human beings to communicate in private, I would tell you the truth, that it deeply disturbs me. I would tell you that I have for over six years regularly donated to organizations fighting against such a dystopia (e.g. EFF, Freedom of the Press Foundation, ACLU, open software etc). I would tell you that I sometimes fantasize of actively fighting the good fight to protect privacy and freedom and I only go back to doing my research because that is what I do best. I would tell you that Edward Snowden gives me hope in mankind, and that if I were ever to be in his position, I hope I would have the courage to do what he did.
And then I would go back and attend my conference/seminar, knowing that it is indirectly funded in part by an organization I detest, and I would continue to be conflicted about my moral lines and wonder if my choice is the right one.