N.S.A. Foils Much Internet Encryption
The National Security Agency is winning its long-running secret war on encryption, using supercomputers, technical trickery, court orders and behind-the-scenes persuasion to undermine the major tools protecting the privacy of everyday communications …
Context & Ripple Effects
This is the second wave of the Snowden disclosures to land squarely on the technology industry: six weeks after CNET reported federal pressure on Web companies to hand over master encryption keys, the New York Times, Guardian and ProPublica jointly publish what the agencies themselves call their 'long-running secret war' on encryption itself. The confirmed claim is sweeping — supercomputers, technical trickery, court orders and behind-the-scenes persuasion aimed at the tools protecting everyday communications.
First-order effects
- Web companies caught between the earlier master-key pressure and this report now face an immediate trust problem with users who assumed SSL and VPN sessions were private.
- Every vendor whose encryption product is named or implied as compromised inherits a sales liability overnight, especially with government and enterprise customers outside the US.
Second-order effects
- Foreign buyers of US-origin security software and cloud services have a concrete reason to re-evaluate suppliers, shifting procurement toward domestic or non-American alternatives where governments permit it.
- Standards bodies and cryptographers face renewed scrutiny over how weaknesses entered widely deployed protocols, putting the NIST and vendor relationship under a credibility test.
Third-order effects
- If the pattern holds, the structural consequence is a bifurcating internet: one ecosystem built on US platforms whose users discount their privacy guarantees, another fragmenting into stronger end-to-end encryption and regional infrastructure designed around distrust of the intercepting state.
- The episode also sets up a durable policy collision between intelligence agencies seeking guaranteed access and a commercial internet whose economics depend on being trusted with data — a fight regulators and courts will be adjudicating for years.
The trend: State signals-intelligence capability is colliding with commercial cryptography, forcing the global technology industry to choose between cooperation with surveillance programs and rebuilding trust through stronger encryption.
Related: N.S.A. · Feds put heat on Web firms for master encryption keys · By cracking cellphone code, NSA has capacity for decoding private conversations · Encryption products proliferate after NSA revelations · Snowden documents reveal routine SSL/TLS interception
Related Coverage
- US and UK spy agencies defeat privacy and security on the internet Guardian
- How to remain secure against NSA surveillance Guardian · Bruce Schneier
- What Exactly Are the NSA's ‘Groundbreaking Cryptanalytic Capabilities’? Wired · Bruce Schneier
- ProPublica ProPublica
- VentureBeat VentureBeat · Meghan Kelly
- Business Insider Business Insider · Geoffrey Ingersoll
- The Switch The Switch · Timothy B. Lee
- Ars Technica Ars Technica · Dan Goodin
- TechCrunch TechCrunch · Gregory Ferenstein
- The Register The Register · Jack Clark
- InfoWorld InfoWorld · Grant Gross
- Hillicon Valley Hillicon Valley · Brendan Sasso
- ACLU ACLU
- TIME TIME
- Digits Digits · Danny Yadron
- Techdirt Techdirt · Mike Masnick
- Electronista Electronista
- darkREADING darkREADING · Brian Prince
- The Atlantic Wire The Atlantic Wire · Philip Bump
- ReadWrite ReadWrite · Brian Proffitt
- Gizmodo Gizmodo · Adam Clark Estes
- GamePolitics blogs GamePolitics blogs · James Fudge
- Boing Boing Boing Boing · Xeni Jardin
- Gawker Gawker · Sam Biddle
- WebProNews WebProNews · Zach Walton
- @jpbarlow @jpbarlow · John Perry Barlow
- @migueldeicaza @migueldeicaza · Miguel de Icaza
- @zedshaw @zedshaw
- @csoghoian @csoghoian · Christopher Soghoian
- @benedictevans @benedictevans · Benedict Evans
- @novapbs @novapbs · Nova
- @nytimes @nytimes · The New
- @xor @xor · Parker Higgins
- @shiraovide @shiraovide · Shira Ovide
- @nicoleperlroth @nicoleperlroth · Nicole Perlroth
- @pkedrosky @pkedrosky · Paul Kedrosky
- @cipherlaw @cipherlaw · Jim Denaro
- @tldr @tldr
- @normative @normative · Julian Sanchez
- @dansinker @dansinker · Dan Sinker
- @cryptoki @cryptoki
- @thepeterha @thepeterha · Peter Ha
- @mollywood @mollywood · Molly Wood
- @glennf @glennf · Glenn Fleishman
- @dannysullivan @dannysullivan · Danny Sullivan
- @trevortimm @trevortimm · Trevor Timm
- @nickbilton @nickbilton · Nick Bilton
- @tomjolly @tomjolly · Tom Jolly
- @caseynewton @caseynewton · Casey Newton
- @ciphersuite @ciphersuite
- @herf @herf · Michael Herf
- @mattbuchanan @mattbuchanan · Matt
- @mydigitalsafety @mydigitalsafety · Internet Safety Org
- @rsingel @rsingel · Ryan Singel
- @beep @beep · Ethan Marcotte
- PandoDaily PandoDaily · Paul Carr
- GigaOM GigaOM · Jeff John Roberts
- ZDNet ZDNet · Michael Lee
- Engadget Engadget · Terrence O'Brien
- Mashable Mashable · Lorenzo Franceschi-Bicchierai
- The Tech Report The Tech Report · Cyril Kowaliski
- The Verge The Verge · Russell Brandom
- Babbage Babbage · T.C.
- SecurityWeek SecurityWeek
- @ejosephsnowden @ejosephsnowden · Edward Snowden
- @arusbridger @arusbridger · Alan Rusbridger
- @_cypherpunks_ @_cypherpunks_ · Michael
- @ggreenwald @ggreenwald · Glenn Greenwald
- @jeffjarvis @jeffjarvis · Jeff Jarvis
- @jamesrbuk @jamesrbuk · James Ball
- @guardian @guardian · The Guardian
- @russellbrandom @russellbrandom · Russell Brandom
- @janinegibson @janinegibson · Janine Gibson
- @bcappelbaum @bcappelbaum · Binyamin Appelbaum
- @samfbiddle @samfbiddle · Sam Biddle
- @jayrosen_nyu @jayrosen_nyu · Jay Rosen
- @emilysteel @emilysteel · Emily Steel
- @stuartmillar159 @stuartmillar159 · Stuart Millar
- Wired Wired · Kim Zetter
- io9 io9 · Annalee Newitz
- @zeynep @zeynep · Zeynep Tufekci
- @konklone @konklone · Eric Mill
- @astepanovich @astepanovich · Amie Stepanovich
- @macfathom @macfathom · Nick Pinto
- @corpounreal @corpounreal
- @pmocek @pmocek · Phil Mocek
- @mattblaze @mattblaze · Matt Blaze
- @mala @mala · Danny O'B
- @fmanjoo @fmanjoo · Farhad Manjoo
- @kolkman @kolkman · Olaf Kolkman
- View article ProPublica
- View article VentureBeat
- View article Business Insider
- View article The Switch
- View article Ars Technica
- View article TechCrunch
- View article The Register
- View article InfoWorld
- View article Hillicon Valley
- View article ACLU
- View article TIME
- View article Digits
- View article Techdirt
- View article Electronista
- View article darkREADING
- View article The Atlantic Wire
- View article ReadWrite
- View article Gizmodo
- View article GamePolitics blogs
- View article Boing Boing
- View article Gawker
- View article WebProNews
- View article @jpbarlow
- View article @migueldeicaza
- View article @zedshaw
- View article @csoghoian
- View article @benedictevans
- View article @csoghoian
- View article @novapbs
- View article @nytimes
- View article @csoghoian
- View article @xor
- View article @shiraovide
- View article @nicoleperlroth
- View article @pkedrosky
- View article @cipherlaw
- View article @csoghoian
- View article @tldr
- View article @normative
- View article @dansinker
- View article @cryptoki
- View article @thepeterha
- View article @xor
- View article @mollywood
- View article @glennf
- View article @dannysullivan
- View article @trevortimm
- View article @nickbilton
- View article @tomjolly
- View article @caseynewton
- View article @ciphersuite
- View article @herf
- View article @mattbuchanan
- View article @mydigitalsafety
- View article @rsingel
- View article @beep
- View article ProPublica
- View article PandoDaily
- View article GigaOM
- View article ZDNet
- View article Engadget
- View article Mashable
- View article Ars Technica
- View article Techdirt
- View article Business Insider
- View article The Tech Report
- View article The Verge
- View article Babbage
- View article SecurityWeek
- View article @ejosephsnowden
- View article @arusbridger
- View article @csoghoian
- View article @_cypherpunks_
- View article @ggreenwald
- View article @jeffjarvis
- View article @jamesrbuk
- View article @guardian
- View article @russellbrandom
- View article @csoghoian
- View article @mattbuchanan
- View article @janinegibson
- View article @xor
- View article @bcappelbaum
- View article @samfbiddle
- View article @jayrosen_nyu
- View article @emilysteel
- View article @stuartmillar159
- View article Wired
- View article The Atlantic Wire
- View article io9
- View article @zeynep
- View article @jeffjarvis
- View article @konklone
- View article @ggreenwald
- View article @astepanovich
- View article @macfathom
- View article @corpounreal
- View article @pmocek
- View article @jayrosen_nyu
- View article @mattblaze
- View article @mattblaze
- View article @mala
- View article @fmanjoo
- View article @kolkman