Index: A B C D E F G H I J K L M N O P Q R S T U V W X Y Z
Home > NSA encryption systems
The National Security Agency took over responsibility for all U.S. Government encryption systems when it was formed in 1952. The technical details of most NSA-approved systems are still classified, but much more about its early systems has become known and its most modern systems share at least some features with commercial products.One thing one can say about NSA encryption systems is that their outward appearance becomes less interesting as time goes on. Rotor machines from the 1940s and 1950s were mechanical marvels. The first generation electronic systems were quirky devices with cantankerous punch card readers for loading keys and failure-prone, tricky-to-maintain vacuum tube circuitry. More recent systems are just black boxes, often literally. In fact they are called blackers in NSA parlance because they convert classified signals (red) into unclassified signals (black). They typically have electrical connectors for the red signals, the black signals, electrical power, and a port for loading keys. Controls can be limited to selecting between key fill, normal operation and diagnostic modes and an all important zeroize button that erases classified information including keys and perhaps the encryption algorithms.
1 Security factors
NSA has to deal with many factors in insuring the security of communication and information ( COMSEC and INFOSEC in NSA jargon):
- Confidentiality and authenticity - making sure messages cannot be read by unauthorized people and that they cannot be forged nonrepudiation. Little is publicly known about the algorithms NSA has developed for protecting classified information, what NSA calls Type 1In cryptography, a Type 1 product is a device or system certified by the National Security Agency (NSA) for use in cryptographically securing classified U. Government information. Type 1 certification is a rigorous process that includes testing and formal algorithms. In 20032003 is a common year starting on Wednesday (link will take you to calendar), and also: The International Year of Freshwater The European Disability Year Summary Perhaps the defining global event of the year 2003 was the Invasion of Iraq launched by the U, for the first time in its history, NSA approved two published algorithms, SkipjackThe name Skipjack has several meanings: Skipjack the block cipher designed by the NSA. Skipjack tuna a fish of the Scombridae ( tuna) family. Skipjack Boat a fishing boat used on the Chesapeake Bay, USA. USS Skipjack (SS-184 a United States submarine. and AES for Type 1 use in NSA approved systems.
- traffic flow security - making sure an adversary cannot obtain information from traffic analysisTraffic analysis is the process of intercepting and examining messages in order to deduce information from patterns in communication. It can be performed even when the messages are encrypted and cannot be decrypted. In general, the greater the number of m, often accomplished by link encryptionLink encryption is an approach to communications security that encrypts and decrypts all traffic at each end a communications line (e. a teletype circuit). It contrasts with end-to-end encryption where messages are encrypted by the sender at the point of.
- key managementIn cryptography, key management includes all of the provisions made in a cryptosystem design, in cryptographic protocols in that design, in user procedures, and so on, which are related to generation, exchange, storage, safeguarding, use, vetting, and rep - getting keys securely to thousands of crypto boxes in the field, perhaps the most challenging part of any encryption system. One NSA goal is benign fill (technology for distributing keys in a way that the humans never have access to plaintext key).
- investigative access - making sure encrypted communications are accessible to the U.S. Government. While few would argue with the need for the government to access its own internal communications, the NSA Clipper chipThe Clipper chip is a chipset that was developed and promoted by the U. Government as an encryption device to be adopted by telecommunications companies for voice transmission. Background In the early 1990s, the increasing popularity of the Internet and o proposal to extend this key escrow requirement to public use of cryptography was highly controversial.
- TEMPEST - protecting plaintext from compromise by electronic, acoustic or other emanations.
- tamper proof, tamper evident, self destruct - ensuring security even if encryption systems are physically accessed without authorization or are captured.
- meeting military specifications for size, weight, power consumption, MTBF and ruggedness to fit in mobile platforms.
- EMP hardening - protecting against nuclear explosion effects, particularly electromagnetic pulse.
- insuring compatibility with military and commercial communication standards.
- controlling cost - making sure encryption is affordable so units that need it have it. There are many costs beyond the initial purchase price, including the manpower to operate and maintain the systems and to insure their security and the cost of key distribution.
- enabling secure communication with NATO, allied and coalition forces without compromising secret methods.
Read more »