NSA BACKS DOWN ON DATA ENCRYPTION

US allies don’t trust spy agency

SAN FRANCISCO

AN INTERNATIONAL group of cryptography experts has forced the United States National Security Agency to back down over two data encryption techniques it wanted set as global industry standards, reflecting deep mistrust among close US allies.

In interviews and emails seen by Reuters, academic and industry experts from countries, including Germany, Japan and Israel, worried that the US electronic spy agency was pushing the new techniques not because they were good encryption tools, but because it knew how to break them.

NSA has now agreed to drop all but the most powerful versions of the techniques — those least likely to be vulnerable to hacks — to address the concerns.

The dispute, which has played out in a series of closed-door meetings around the world over the past three years and has not been reported, turns on whether the International Organisation of Standards (ISO) should approve two NSA data encryption techniques, known as Simon and Speck.

The presence of NSA officials and former NSA contractor Edward Snowden’s revelations about the agency’s penetration of global electronic systems have made a number of delegates suspicious of the motives of the US delegation to ISO, according to interviews with a dozen current and former delegates.

Suspicions stem largely from internal NSA documents disclosed by Snowden that showed the agency had previously plotted to manipulate standards and promote technology it could penetrate.

Budget documents, for example, sought funding to “insert vulnerabilities into commercial encryption systems”.

More than a dozen of the experts involved in the approval process for Simon and Speck feared that if the NSA was able to crack the encryption techniques, it would gain a “back door” into coded transmissions, according to the interviews and emails and other documents seen by Reuters.

“I don’t trust the designers,” Israeli delegate Orr Dunkelman, a computer science professor at the University of Haifa, said, citing Snowden’s papers.

“There are quite a lot of people in NSA who think their job is to subvert standards. My job is to secure standards.” Reuters