RSA received $10 million to use backdoored NSA algorithm by default in crypto software BSafe
Exclusive: Secret contract tied NSA and security industry pioneer — (Reuters) - As a key part of a campaign to embed encryption software that it could crack into widely used computer products …
Context & Ripple Effects
The Reuters exclusive lands mid-Snowden, days after reporting on a constitutional challenge to the NSA's near-universal phone metadata program, and it moves the surveillance story from government collection into commercial software itself: a confirmed $10 million contract that made an agency-influenced algorithm the default inside BSafe, one of the most widely embedded crypto toolkits.
The breadth of same-day pickup — The Verge, Ars Technica, CNET, Techdirt, The Register and others all carried the report within hours — signals how directly it strikes at the trust model of the US security industry, where RSA's name has functioned as a seal of cryptographic credibility for decades.
First-order effects
- RSA's enterprise customers running BSafe are left holding encryption defaults they now have reason to distrust, forcing immediate re-evaluation of deployments built on the toolkit.
- The NSA's dual role — standard-setter for commercial cryptography and active party in weakening it — is documented in contract form, not inference, collapsing the plausible-deniability space other vendors relied on.
Second-order effects
- Rival security vendors gain a competitive opening by marketing audited, openly specified algorithms and non-US provenance, turning transparency into a pricing and procurement argument against incumbents with government ties.
- Procurement teams and CISOs shift scrutiny from feature sets to default cipher choices and vendor funding relationships, raising diligence costs across the entire encryption supply chain.
Third-order effects
- If the pattern holds, US-origin proprietary crypto faces structural erosion: buyers gravitate toward open standards with public cryptanalysis histories, weakening the closed-vendor model that firms like RSA built their franchises on.
- The episode hardens the policy fault line between intelligence agencies seeking exploitable access and the commercial internet's demand for trustworthy encryption — a conflict likely to surface in future standards bodies and congressional oversight.
The trend: Post-Snowden, commercial cryptography is repricing trust itself, shifting from vendor-certified defaults toward publicly audited algorithms as government influence over encryption becomes a documented procurement risk.