Memos may relate to secret NSA deal with leading cryptography vendor

In 2007 I wrote in my “National Security Agency: The Historiography of Concealment” that America’s leading signals intelligence agency had made a secret deal with Crypto AG, a Swiss-based manufacturer of cryptographical equipment. The agreement, which lasted for much of the Cold War, allegedly allowed the NSA to read the classified messages of dozens of nations that purchased encoding equipment from Crypto AG. As I expected, the claim drew criticism from individuals connected with Crypto AG, including company scientists, who argued that the Swiss manufacturer would never have agreed to a deal that undermined its professional reputation as a trusted and neutral vendor of cryptological devices. Now, however, the BBC has revealed two recently declassified NSA memos that appear to provide further proof of the deal.

My 2007 claim was based on a string of well documented allegations that surfaced in the early 1980s. While conducting research for his seminal book The Puzzle Palace, historian James Bamford came across references to Project BORIS, which involved a pact between the NSA and the Swiss company. To be precise, the deal appeared to have been struck between the Swiss inventor and Crypto AG founder Boris Hagelin and William F. Friedman, an American cryptologist who led the Armed Forces Security Agency, a forerunner of the NSA. The two men were united by a deep personal friendship, which was forged during World War II by their mutual hatred of Nazism.

Bamford’s claim was echoed in 1996 by Scott Shane and Tom Bowman, reporters for The Baltimore Sun. In a six-part investigative series about the NSA, the two journalists wrote that Friedman visited Hagelin during a trip to Switzerland in 1955 and asked for his help so that American could dominate its Cold War rivals. According to Shane and Bowman, Hagelin agreed and built a type of cryptological backdoor in Crypto AG’s devices, which allowed the NSA to read millions of messages for many decades. The company, of course, reacted furiously, saying that claims of a secret deal were “pure invention”.

On Thursday, however, BBC security correspondent Gordon Corera confirmed that a BBC investigation of 55,000 pages of documents, which were declassified by the NSA in April, claim to have found proof of the secret agreement. The declassified material, said Corera, contains two versions of the same NSA memorandum, as well as an earlier draft, which refer to a “gentleman’s agreement” between Friedman and Hagelin. Under the agreement, Crypto AG would inform the NSA about periodical changes to the technical specifications of its encoding machines. The company would also provide the American spy agency with detailed lists showing the precise models purchased by various national governments around the world. Furthermore, Crypto AG agreed not to sell the more advanced, customizable models of its equipment to countries viewed by Washington as directly adversarial. This, says the BBC, amounted to Crypto AG deceiving some of its customers, by offering them “watered-down versions” of its encoding devices.

Corera notes that there is no evidence in the memos that Crypto AG built any kind of back door in its devices for use by the NSA. Instead, by providing the American agency with detailed operational knowledge of the devices, it enabled American codebreakers to reduce the time and effort needed to break encoded messages intercepted by the NSA.

There are a couple of minor errors in Corera’s article. For instance, the “father of American code-breaking” is not Friedman, as he claims, but Herbert Yardley, who led the so-called Black Chamber (also known as the Cipher Bureau) in 1919, long before Friedman was in the picture. Additionally, he fails to mention Bowman’s contribution to Shane’s Baltimore Sun article, which was published in 1996, not 1995, as he writes. These minor errors aside, however, the BBC discovery is absolutely crucial for our understanding of cryptological history in the Cold War.

► Author: Joseph Fitsanakis | Date: 31 July 2015 | Permalink