The
National Security Agency/Central Security Service
(NSA/CSS) is a cryptologic intelligence agency of
the United
States government, administered as part of the United States
Department of Defense
. Created on November 4, 1952 by President
Harry S. Truman, it is responsible for the collection
and analysis of foreign communications and foreign
signals intelligence, which involves
cryptanalysis. It is also responsible
for protecting U.S. government communications and
information systems from similar
agencies elsewhere, which involves
cryptography. As of 2008, NSA has been directed
to help monitor U.S. federal agency
computer networks to protect them against
attacks.The NSA is directed by a
lieutenant general or
vice admiral. NSA is a key component of
the
U.S.
Intelligence
Community, which is headed by the
Director of National
Intelligence. The
Central
Security Service is a co-located agency created to coordinate
intelligence activities and co-operation between NSA and U.S.
military cryptanalysis agencies. NSA's work is limited to
communications intelligence; it does not perform field or
human intelligence activities. By law, NSA's
intelligence gathering is limited to foreign communications,
although there have been
numerous reports
that the agency does not always abide by these laws.
Organization
The National Security Agency is divided into two major missions:
the Signals Intelligence Directorate (SID), which produces foreign
signals intelligence
information, and the Information Assurance Directorate (IAD), which
protects U.S. information systems.
Role
NSA's
eavesdropping mission includes
radio broadcasting, both from various organizations
and individuals, the
Internet, telephone
calls, and other intercepted forms of communication. Its secure
communications mission includes
military,
diplomatic, and all other sensitive,
confidential or secret government communications. It has been
described as the world's largest single employer of
mathematicians, and the owner of the single
largest group of
supercomputers , but
it has tried to keep a low profile. For many years, its existence
was not acknowledged by the U.S. government, earning it the
nickname, "No Such Agency" (NSA). Due to the fact that the agency
rarely makes any public remarks, it has been quipped that their
motto is "never say anything".
Because of its listening task, NSA/CSS has been heavily involved in
cryptanalytic research, continuing the
work of predecessor agencies which had broken many
World War II code and
ciphers
(see, for instance,
Purple,
Venona project, and
JN-25).
In 2004,
NSA Central Security
Service and the National Cyber Security
Division of the Department of Homeland Security
(DHS) agreed to expand NSA Centers of Academic
Excellence in Information Assurance Education Program.
As part of the National Security
Presidential Directive 54/Homeland
Security Presidential Directive 23 (NSPD 54), signed on January 8,
2008 by President Bush, the NSA became the lead agency to monitor
and protect all of the federal government's computer networks from
cyber-terrorism.
Facilities
Headquarters for the National Security Agency
are at Fort George
G.
Meade
, Maryland
, about 15
miles (24 km) southwest of Baltimore
. The NSA has its own exit off the
Baltimore-Washington Parkway
labeled "NSA Employees Only." The scale of the operations at the
NSA is hard to determine from unclassified data; some 18,000
parking spaces are visible in photos of the site. In 2006, the
Baltimore Sun reported that
the NSA was at risk of electrical overload because of insufficient
internal electrical infrastructure at Fort Meade to support the
amount of equipment being installed. This problem was apparently
recognized in the 1990s but not made a priority, and "now the
agency's ability to keep its operations going is
threatened."
Its secure government communications work has
involved the NSA in numerous technology areas, including the design
of specialized communications hardware and software, production of
dedicated semiconductors (at the
Ft.
Meade
chip fabrication plant), and advanced cryptography research. The agency
contracts with the private sector in the fields of research and
equipment.
In addition to its Ft.
Meade headquarters, the NSA has facilities at
the Texas Cryptology Center
in San Antonio,
Texas
; at Fort
Gordon
, Georgia
, and elsewhere. A USD $1.9 billion
data center is planned for Camp
Williams, Utah
.
National Computer Security Center
The
National Computer Security Center, once part
of the National Security Agency, was established in 1981 and was
responsible for testing and evaluating computer equipment for use
in high security and/or confidential applications. NCSC was also
responsible for publishing the
Orange Book and
Red Book detailing
trusted computing and network platform specifications. The two
works are more formally known as the
Trusted
Computing System Evaluation Criteria and
Trusted Network
Interpretation, part of the
Rainbow
Series, however, they have largely been replaced by the
Common Criteria.
History
The National Security Agency can be traced to the May 20, 1949,
creation of the
Armed Forces Security Agency
(AFSA).
This organization was originally established
within the U.S.
Department of
Defense
under the command of the Joint Chiefs of Staff. The AFSA
was to direct the communications and electronic intelligence
activities of the U.S.
military
intelligence units: the
Army
Security Agency, the
Naval
Security Group, and the
Air Force Security
Service. However, that agency had little power and lacked a
centralized coordination mechanism. The creation of NSA resulted
from a December 10, 1951, memo sent by
CIA Director
Walter Bedell Smith to James S. Lay,
Executive Secretary of the
National Security Council.
The memo observed that "control over, and coordination of, the
collection and processing of Communications Intelligence had proved
ineffective" and recommended a survey of communications
intelligence activities. The proposal was approved on December 13,
1951, and the study authorized on December 28, 1951. The report was
completed by June 13, 1952. Generally known as the "Brownell
Committee Report," after committee chairman
Herbert Brownell, it surveyed the history
of U.S. communications intelligence activities and suggested the
need for a much greater degree of coordination and direction at the
national level. As the change in the security agency's name
indicated, the role of NSA was extended beyond the armed
forces.
The creation of NSA was authorized in a letter written by President
Harry S. Truman in June 1952. The agency was formally
established through a revision of National Security Council
Intelligence Directive (NSCID) 9 on October 24, 1952, and
officially came into existence on November 4, 1952. President
Truman's letter was itself
classified and remained unknown to
the public for more than a generation.
Insignia

The NSA's insignia.
The
heraldic insignia of NSA consists of a
bald eagle facing its right, grasping a
key in its talons, representing NSA's clutch on security as well as
the mission to protect and gain access to secrets. The eagle is set
on a background of blue and its breast features a blue shield
supported by thirteen bands of red and white.
The surrounding white
circular border features "National Security Agency" around the top
and "United
States of America
" underneath, with two five-pointed silver stars
between the two phrases. The current NSA insignia has been
in use since 1965, when then-
Director, LTG
Marshall S. Carter (
USA) ordered the creation of a device to
represent the Agency.
Effect on non-governmental cryptography
NSA has been involved in debates about public policy, both
indirectly as a behind-the-scenes adviser to other departments, and
directly during and after
Vice Admiral
Bobby Ray Inman's directorship. NSA was a major player in the
debates of the 1990s regarding the
export of cryptography. Restrictions
on export were reduced but not eliminated in 1996.
Data Encryption Standard (DES)
NSA was embroiled in some minor controversy concerning its
involvement in the creation of the
Data Encryption Standard (DES), a
standard and public
block cipher
algorithm used by the
U.S. government and banking community.
During the development of DES by
IBM in the
1970s, NSA recommended changes to some details of the design. There
was suspicion that these changes had weakened the algorithm
sufficiently to enable the agency to eavesdrop if required,
including speculation that a critical component—the so-called
S-box—had been altered to insert a
"
backdoor" and that the
reduction in key length might have made it feasible for NSA to
discover DES keys using massive computing power. It has since been
observed that the S-boxes in DES are particularly resilient against
differential
cryptanalysis, a technique which was not publicly discovered
until the late 1980s, but which was known to the IBM DES team. The
United
States Senate Select Committee on Intelligence reviewed NSA's
involvement, and concluded that while the agency had provided some
assistance, it had not tampered with the design.
Clipper chip
Because of concerns that widespread use of strong cryptography
would hamper government use of
wiretap, NSA proposed the concept of
key escrow in 1993 and introduced the
Clipper chip that would offer stronger
protection than DES but would allow access to encrypted data by
authorized law enforcement officials. The proposal was strongly
opposed and key escrow requirements ultimately went nowhere.
However, NSA's
Fortezza hardware-based
encryption cards, created for the Clipper project, are still used
within government, and NSA ultimately published the design of the
SKIPJACK cipher (but not the key
exchange protocol) used on the cards.
Advanced Encryption Standard (AES)
Possibly because of previous controversy, the involvement of NSA in
the selection of a successor to DES, the
Advanced Encryption Standard
(AES), was initially limited to
hardware
performance testing (see
AES competition). NSA
has subsequently certified AES for protection of classified
information (for at most two levels, e.g. SECRET information in an
unclassified environment) when used in NSA-approved systems. The
widely-used
SHA hash functions
were designed by NSA.
Dual EC DRBG random number generator
NSA promoted the inclusion of a random number generator called
Dual EC DRBG in the U.S.
National
Institute of Standards and Technology's 2007 guidelines. This
led to speculation of a
backdoor which would allow NSA access
to data encrypted by systems using that random number
generator.
Academic research
NSA has invested many millions of dollars in academic research
under grant code prefix
MDA904, resulting in over 3,000
papers (as of 2007-10-11). NSA/CSS has, at times, attempted to
restrict the publication of academic research into cryptography;
for example, the
Khufu and Khafre
block ciphers were voluntarily withheld in response to an NSA
request to do so.
Patents
NSA has the ability to file for a
patent from
the
U.S. Patent and Trademark
Office under
gag order. Unlike normal
patents, these are not revealed to the public and do not expire.
However, if the Patent Office receives an application for an
identical patent from a third party, they will reveal NSA's patent
and officially grant it to NSA for the full term on that
date.
One of NSA's published patents describes a method of
geographically locating an individual computer
site in an Internet-like network, based on the
latency of multiple network connections.
NSA programs
ECHELON
NSA/CSS,
in combination with the equivalent agencies in the United
Kingdom
(Government Communications
Headquarters
), Canada
(Communications Security
Establishment
), Australia
(Defence Signals
Directorate), and New Zealand
(Government
Communications Security Bureau), otherwise known as the
UKUSA group, is widely reported to be in
command of the operation of the so-called ECHELON system. Its capabilities are
suspected to include the ability to monitor a large proportion of
the world's transmitted civilian
telephone,
fax and data
traffic, according to a December 16, 2005 article in the
New York Times.
Technically, almost all modern telephone, internet, fax and
satellite communications are exploitable due to recent advances in
technology and the 'open air' nature of much of the radio
communications around the world.NSA's presumed collection
operations have generated much criticism, possibly stemming from
the assumption that NSA/CSS represents an infringement of
Americans'
privacy.
However, NSA's
United States Signals Intelligence
Directive 18
(USSID 18) strictly prohibits the interception or
collection of information about "...U.S. persons, entities,
corporations or organizations..." without explicit written legal
permission from the United States Attorney
General, when the subject is located abroad, or the Foreign Intelligence
Surveillance Court when within U.S. Borders.
The
U.S.
Supreme
Court
has ruled that intelligence agencies cannot conduct
surveillance against American citizens. There are a few
extreme circumstances where collecting on a
U.S. entity is allowed without a USSID
18 waiver, such as with civilian distress signals, or sudden
emergencies such as the
September 11, 2001 attacks;
however, the
USA PATRIOT Act has
significantly changed privacy legality.
There have been alleged violations of USSID 18 that occurred in
violation of NSA's strict charter prohibiting such acts. In
addition, ECHELON is considered with indignation by citizens of
countries outside the
UKUSA alliance, with
numerous allegations that the United States government uses it for
motives other than its national security, including
political and
industrial espionage. Examples include
the gear-less
wind turbine technology
designed by the German firm
Enercon and the
speech technology developed by the Belgian firm
Lernout & Hauspie.
An article in the
Baltimore Sun reported in 1995 that aerospace company
Airbus lost a $6 billion contract with
Saudi
Arabia
in 1994 after NSA reported that Airbus officials
had been bribing Saudi officials to secure the contract. The
chartered purpose of NSA/CSS is solely to acquire significant
foreign intelligence information pertaining to National Security or
ongoing military intelligence operations.
Domestic activity
NSA's mission, as set forth in
Executive Order 12333, is to collect
information that constitutes "foreign intelligence or
counterintelligence" while
not "acquiring information
concerning the domestic activities of United States persons". NSA
has declared that it relies on the FBI to collect information on
foreign intelligence activities within the borders of the USA,
while confining its own activities within the USA to the embassies
and missions of foreign nations.
NSA's domestic surveillance activities are limited by the
requirements imposed by the
Fourth Amendment to
the U.S. Constitution;
however, these protections do not apply to non-U.S. persons located
outside of U.S. borders, so the NSA's foreign surveillance efforts
are subject to far fewer limitations under U.S. law. The specific
requirements for domestic surveillance operations are contained in
the
Foreign
Intelligence Surveillance Act of 1978 (FISA), which does not
extend protection to non-U.S.
citizens
located outside of
U.S.
territory.
These activities, especially the publicly acknowledged domestic
telephone tapping and call database programs, have prompted
questions about the extent of the NSA's activities and concerns
about threats to privacy and the rule of law.
Wiretapping programs
Domestic wiretapping under Richard Nixon
In the years after President
Richard
Nixon resigned, there were several investigations of suspected
misuse of
Central
Intelligence Agency (CIA) and NSA facilities. Senator
Frank Church headed a Senate investigating
committee (the
Church Committee)
which uncovered previously unknown activity, such as a CIA plot
(ordered by President
John F.
Kennedy) to assassinate
Fidel
Castro. The investigation also uncovered NSA's wiretaps on
targeted American citizens. After the Church Committee hearings,
the
Foreign
Intelligence Surveillance Act of 1978 became law, limiting
circumstances under which domestic surveillance was allowed.
ThinThread wiretapping and data mining
A wiretapping program named
ThinThread
was tested in the late 1990s, but never put into operation.
ThinThread contained both advanced
data
mining capabilities and built-in privacy protections. These
privacy protections were abandoned in the post-
9/11 effort by President
George W. Bush
to improve the intelligence community's responsiveness to
terrorism. The research done under this program may have
contributed to the technology used in later systems.
Warrantless wiretaps under George W. Bush
On
December 16, 2005, the New York
Times reported that, under White House
pressure and with an executive order from
President George W. Bush, the National Security Agency, in an
attempt to thwart
terrorism, had been
tapping the telephones of select
individuals in the U.S. calling persons outside the country,
without obtaining
warrants from the
United
States Foreign Intelligence Surveillance Court, a secret court
created for that purpose under the
Foreign Intelligence
Surveillance Act (FISA).
One such surveillance program, authorized by the United States
Signals Intelligence Directive 18 of President George Bush, was the
Highlander Project undertaken for the National Security Agency by
the
United States Army 513th
Military Intelligence Brigade. NSA relayed telephone (including
cell phone) conversations obtained from both ground, airborne, and
satellite monitoring stations to various
U.S. Army Signal
Intelligence Officers, including the 201st Military Intelligence
Battalion. Conversations of citizens of the United States were
intercepted, along with those of other nations.
Proponents of the surveillance program claim that the President has
executive authority to
order such action, arguing that laws such as FISA are overridden by
the President's Constitutional powers. In addition, some argued
that FISA was implicitly overridden by a subsequent statute, the
Authorization
for Use of Military Force, although the Supreme Court's ruling
in
Hamdan v. Rumsfeld deprecates this view. In the
August 2006 case
ACLU v.
NSA,
U.S. District Court Judge
Anna Diggs Taylor concluded that NSA's
warrantless surveillance program was both illegal and
unconstitutional. On July 6, 2007 the
6th Circuit Court of Appeals
overturned Judge Taylor's ruling, reversing her findings.
AT&T Internet monitoring
In May 2006,
Mark Klein, a former
AT&T employee, alleged that his company
had cooperated with NSA in installing hardware to monitor network
communications including traffic between American citizens.
Wiretapping under Barack Obama
The
New York Times reported in 2009 that the NSA is intercepting
communications of American citizens including a Congressman,
although the Justice Department
believed that the NSA had corrected its
errors. United States Attorney General
Eric Holder resumed the wiretapping according to
his understanding of the Foreign Intelligence Surveillance Act of
1978 Amendments Act of 2008 which Congress passed in July 2008 but
without explaining what had occurred.
Transaction data mining
NSA is reported to use its computing capability to analyze
"transactional" data that it regularly acquires from other
government agencies, which gather it under their own jurisdictional
authorities. As part of this effort, NSA now monitors huge volumes
of records of domestic emails and Internet searches as well as bank
transfers, credit-card transactions and travel and telephone
records, according to current and former intelligence officials
interviewed by the
Wall Street
Journal.
Criticisms
On January 17, 2006, the
Center for Constitutional
Rights filed a lawsuit,
CCR v.
Bush, against the
Bush Presidency. The lawsuit challenged the
National Security Agency's (NSA's) surveillance of people within
the United States, including the interception of CCR emails without
securing a warrant first.
In fiction
Since the existence of the NSA has become more widely known in the
past few decades, and particularly since the 1990s, the agency has
regularly been portrayed in spy fiction. Many such portrayals
grossly exaggerate the organization's involvement in the more
sensational activities of intelligence agencies. The agency now
plays a role in numerous books, films, television shows, and
computer games.
Staff
Directors
- November 1952 – November 1956 Lt. Gen. Ralph J. Canine, USA
- November 1956 – November 1960 Lt. Gen. John A. Samford, USAF
- November 1960 – January 1962 V.
Adm. Laurence H. Frost, USN
- January 1962 – June 1965 Lt. Gen. Gordon A. Blake, USAF
- June 1965 – August 1969 Lt. Gen. Marshall S. Carter, USA
- August 1969 – August 1972 V.
Adm. Noel
A. M. Gaylor, USN
- August 1972 – August 1973 Lt. Gen. Samuel C. Phillips, USAF
- August 1973 – July 1977 Lt. Gen. Lew Allen, Jr., USAF
- July 1977 – April 1981 V. Adm. Bobby Ray
Inman, USN
- April 1981 – May 1985 Lt. Gen. Lincoln D. Faurer, USAF
- May 1985 – August 1988 Lt. Gen. William E. Odom, USA
- August 1988 – May 1992 V. Adm. William
O. Studeman, USN
- May 1992 – February 1996 V.
Adm. John
M. McConnell, USN
- February 1996 – March 1999 Lt. Gen. Kenneth A. Minihan, USAF
- March 1999 – April 2005 Lt. Gen. Michael V. Hayden, USAF
- April 2005 – present Lt. Gen. Keith B. Alexander, USA
Notable cryptanalysts
NSA encryption systems
NSA is responsible for the encryption-related components in these
systems:
- EKMS Electronic Key Management System
- FNBDT Future Narrow Band Digital
Terminal
- Fortezza encryption based on portable
crypto token in PC Card format
- KL-7 ADONIS off-line rotor encryption
machine (post-WW II to 1980s)
- KW-26 ROMULUS electronic in-line teletype
encryptor (1960s–1980s)
- KW-37 JASON fleet broadcast encryptor
(1960s–1990s)
- KY-57 VINSON tactical radio voice
encryptor
- KG-84 Dedicated Data
Encryption/Decryption
- SINCGARS tactical radio with
cryptographically controlled frequency hopping
- STE secure terminal equipment
- STU-III secure telephone unit, currently
being phased out by the STE
- TACLANE product line by General Dynamics C4 Systems
NSA has specified
Suite A
and
Suite B cryptographic
algorithms to be used in U.S. government systems; the Suite B
algorithms are a subset of those previously specified by
NIST and are
expected to serve for most information protection purposes, while
the Suite A algorithms are secret and are intended for especially
high levels of protection.
Some past NSA SIGINT activities
See also
NSA computers
References
Further reading
- Bamford, James,
Body of Secrets: Anatomy of the Ultra-Secret National Security
Agency, Doubleday, 2001, ISBN 0-385-49907-8.
- Bamford, James, The Puzzle Palace, Penguin
Books, ISBN 0-14-006748-5.
- Levy, Steven,
Crypto: How the Code Rebels Beat the Government—Saving Privacy in
the Digital Age– discussion of the development of
non-government cryptography, including many accounts of tussles
with the NSA.
- Radden Keefe, Patrick,
Chatter: Dispatches from the Secret World of Global
Eavesdropping, Random House, ISBN 1-4000-6034-6.
- Liston, Robert A.,
The Pueblo Surrender: a Covert Action by the National Security
Agency, ISBN 0-87131-554-8.
- Kahn, David, The Codebreakers, 1181 pp., ISBN
0-684-83130-9. Look for the 1967 rather than the 1996 edition.
- Tully, Andrew, The
Super Spies: More Secret, More Powerful than the CIA,
1969, LC 71080912.
- Bamford, James, New York Times, December 25, 2005; The Agency
That Could Be Big Brother. Nytimes.com
- Sam Adams, War of numbers Steerforth; New Ed edition
(June 1, 1998)
- John Prados, The Soviet
estimate: U.S. intelligence analysis & Russian military
strength, hardcover, 367 pages, ISBN 0-385-27211-1, Dial Press
(1982).
- Walter Laqueur, A World of
secrets
- Sherman Kent, Strategic
Intelligence for American Public Policy
- Matthew Aid, The Secret Sentry: The Untold History of
the National Security Agency, 432 pages, ISBN 978-1596915152,
Bloomsbury Press (June 9, 2009)
External links