& çâÌæÚUæð´ ·¤è ¥ôÚU Îð¹Ùæ ÁæÚUè ÚU¹ð´ ¥ÍæüÌ ¥ÂÙð ÜÿØ ÂÚU ŠØæÙ ÚU¹ð´Ð ãæÚU Ù ×æÙð´, €UØô´ç·¤ ·¤æ× ·¤ÚUÙð âð ¥æÂ·¤ô ©gðàØ ·¤è Âýæç# ãôÌè ãñ ¥õÚU ÁèßÙ ·¤æ ¹æÜèÂÙ ÎêÚU ãôÌæ ãñÐ ÖÜð ãè ÁèßÙ ×ð´ ç·¤ÌÙè Öè ·¤çÆÙæ§ü €UØô´ Ù ¥æ°, çÁ™ææâæ ¥õÚU ©ˆâæã ÕÙæ° ÚU¹ð´Ð ŠØæÙ ÚU¹ð´, ÜÿØ ã×ðàææ ¥æÂ·Ô¤ Âæâ ãôÌð ãñ´ çÁ‹ãð´ ÂæÙð ·Ô¤ çÜ° ÂýØæâ ¥æÂ ·¤Öè Öè àæéM¤ ·¤ÚU â·¤Ìð ãñ´Ð

Defeating internet privacy of millions

Leaked documents show how US, UK spy agencies did it

The Guardian online
US and British intelligence agencies have successfully cracked much of the online encryption relied upon by hundreds of millions of people to protect the privacy of their personal data, online transactions and emails, according to top-secret documents revealed by former contractor Edward Snowden.
The files show that the National Security Agency and its UK counterpart GCHQ have broadly compromised the guarantees that internet companies have given consumers to reassure them that their communications, online banking and medical records would be indecipherable to criminals or governments.
The agencies, the documents reveal, have
adopted a battery of methods in their systematic and ongoing assault on what they see as one of the biggest threats to their ability to access huge swathes of internet traffic - "the use of ubiquitous encryption across the internet".
Those methods include covert measures to ensure NSA control over setting of international encryption standards, the use of supercomputers to break encryption with "brute force", and - the most closely guarded secret of all - collaboration with technology companies and internet service providers themselves.
The agencies insist that the ability to defeat encryption is vital to their core missions of counter-terrorism and foreign intelligence gathering.
FROM PAGE 16
But security experts accused them of attacking the internet itself and the privacy of all users. "Cryptography forms the basis for trust online," said Bruce Schneier, an encryption specialist and fellow at Harvard's Berkman Center for Internet and Society. "By deliberately undermining online security in a short-sighted effort to eavesdrop, the NSA is undermining the very fabric of the internet." Classified briefings between the agencies celebrate their success at "defeating network security and privacy".
"For the past decade, NSA has lead [sic| an aggressive, multi-pronged effort to break widely used internet encryption technologies," stated a 2010 GCHQ document. "Vast amounts of encrypted internet data which have up till now been discarded are now exploitable."
An internal agency memo noted that among British analysts shown a presentation on the NSA's progress: "Those not already briefed were gobsmacked!"
The breakthrough, which was not described in detail in the documents, meant the intelligence agencies were able to monitor "large amounts" of data flowing through the world's fibreoptic cables and break its encryption, despite assurances from internet company executives that this data was beyond the reach of government.
The key component of the NSA's battle against encryption, its collaboration with technology companies, is detailed in the US intelligence community's top-secret 2013 budget request under the heading "Sigint [signals intelligence] enabling".
Funding for the programme - $254.9m
for this year - dwarfs that of the Prism program, which operates at a cost of $20m a year, according to previous NSA documents.
Since 2011, the total spending on Sigint enabling has topped $800m.
The programme "actively engages US and foreign IT industries to covertly influence and/or overtly leverage their commercial products' designs", the document states. None of the companies involved in such partnerships are named; these details are guarded by still higher levels of classification.
The document sets out in clear terms the programme's broad aims, including making commercial encryption software "more tractable" to NSA attacks by "shaping" the worldwide marketplace and continuing efforts to break into the encryption used by the next
generation of 4G phones.
Among the specific accomplishments for 2013, the NSA expects the program to obtain access to "data flowing through a hub for a major communications provider" and to a "major internet peer-to-peer voice and text communications system".
Technology companies maintain that they work with the intelligence agencies only when legally compelled to do so. The Guardian has previously reported that Microsoft cooperated with the NSA to circumvent encryption on the Outlook.com email and chat services. The company insisted that it was obliged to comply with "existing or future lawful demands" when designing its products.
The documents show that the agency has already achieved another of the goals laid out in the budget request: to influence
the international standards upon which encryption systems rely.
Independent security experts have long suspected that the NSA has been introducing weaknesses into security standards, a fact confirmed for the first time by another secret document. It shows the agency worked covertly to get its own version of a draft security standard issued by the US National Institute of Standards and Technology approved for worldwide use in 2006.
"Eventually, NSA became the sole editor," the document states.
The NSA's codeword for its decryption program, Bullrun, is taken from a major battle of the American civil war. Its British counterpart, Edgehill, is named after the first major engagement of the English civil war, more than 200 years earlier.