/
Navigation
Chronicles
Browse all articles
Explore
Semantic exploration
Research
Entity momentum
Nexus
Correlations & relationships
Story Arc
Topic evolution
Drift Map
Semantic trajectory animation
Posts
Analysis & commentary
Pulse API
Tech news intelligence API
Browse
Entities
Companies, people, products, technologies
Domains
Browse by publication source
Handles
Browse by social media handle
Detection
Concept Search
Semantic similarity search
High Impact Stories
Top coverage by position
Sentiment Analysis
Positive/negative coverage
Anomaly Detection
Unusual coverage patterns
Analysis
Rivalry Report
Compare two entities head-to-head
Semantic Pivots
Narrative discontinuities
Crisis Response
Event recovery patterns
Connected
Search: /
Command: ⌘K
Embeddings: large
TEXXR ▲
TEXXR

Chronicles

The story behind the story

← → days · ↑ ↓ browse · Enter similar · o open

Crypto expert: encryption libraries, NIST standards now warrant extra scrutiny

On the NSA  —  Let me tell you the story of my tiny brush with the biggest crypto story of the year.  —  A few weeks ago I received a call from a reporter at ProPublica, asking me background questions about encryption.

A Few Thoughts … Matthew Green

Context & Ripple Effects

The call from ProPublica that opens this post sits at the end of a summer of escalations: the XKeyscore disclosures of late July showed analysts querying nearly everything a user does online without prior authorization, and an August leak revealed the NSA had cracked the United Nations' internal videoconferencing system.

The day before this post, the Guardian and New York Times reported that the NSA is winning its secret war on encryption — using court orders and behind-the-scenes persuasion to undermine the very tools protecting everyday communications. That reporting travelled unusually far in a single day, picked up by Businessweek, Wired, GigaOM and The Register, and this expert's response is part of that wave: if the agency subverts implementations rather than breaking math, then the software libraries and NIST-approved standards the industry trusts by default become the suspect surface.

First-order effects

  • Developers and vendors who built products on NIST-standardized algorithms and mainstream encryption libraries face an immediate audit burden: the trust assumption behind those choices was just reported to have been compromised through court orders and covert influence, so every dependency now warrants scrutiny.
  • NIST's role as arbiter of US cryptographic standards is directly damaged — its published suites were blessed in a process the new reporting says the NSA worked behind the scenes to shape, leaving standards adopters unable to distinguish sound design from influenced design.

Second-order effects

  • Vendors competing on security claims will be pushed toward openly developed, publicly vetted alternatives over government-blessed suites, because 'NIST-approved' stops functioning as a selling point the moment buyers associate it with the agency doing the subverting.
  • Standards bodies outside direct NSA reach gain relative credibility, shifting where multinational companies source their cryptographic defaults and pressuring NIST to demonstrate independence to retain relevance.

Third-order effects

  • If subversion of standards and libraries proves systemic rather than isolated, the structural consequence is a migration toward cryptographic transparency — open implementations, public design review, and reduced reliance on any single government's seal of approval as the basis for global internet security.
  • A credibility split between state-endorsed and independently verified cryptography sets up a policy collision: agencies that weaken standards for intelligence advantage undercut the commercial trust the same government's technology sector sells on.

The trend: Trust in government-blessed encryption standards is fracturing under evidence of deliberate subversion, pushing the industry toward independently verifiable cryptography and setting up a renewed fight over backdoors.

Related: NIST · NSA · How does the NSA break SSL? · Behind the new Crypto War

Related Coverage