Deep Dives Research Challenge #6 (Cryptome Archive) - _NSAKEY

Source

---

For this edition of the Cryptome Deep Dives Research Challenge, we delve into the controversial and still extremely relevant issue of backdoors embedded within popular operating systems and software packages, with collaboration between the tech industry and the global intelligence apparatus. These operating systems and software packages are sold and widely distributed to the general public and corporations all around the world as a standard pre packaged model, making it almost impossible to avoid any of the serious repercussions involved. There are many reasons why this is a priority for the intelligence agencies, and as we have seen with the major leaks and disclosures in recent years, bulk data gathering and mass surveillance are two of the main reasons.

In 1999, Andrew D. Fernandes of Cryptonym Corporation discovered a variable cryptographic key called _NSAKEY embedded into Windows NT 4 Service Pack 5 software released in 1996 by Microsoft. The variable contained a public key which could be openly distributed and accessed widely within the software and amongst the intelligence agencies, whilst still controlling and maintaining secrecy with the ownership of the private keys held for decryption.

You can find the source of the above diagram and an explanation of how this exploit was discovered and defined in a research paper published by Cryptonym Corporation and viewable on the wayback machine webpage.

An overview from the Wikipedia page on the _NSAKEY Debacle:

Microsoft's operating systems require all cryptography suites that work with its operating systems to have a digital signature. Since only Microsoft-approved cryptography suites can be installed or used as a component of Windows, it is possible to keep export copies of this operating system (and products with Windows installed) in compliance with the Export Administration Regulations (EAR), which are enforced by the US Department of Commerce and Bureau of Industry and Security(BIS).

It was already known that Microsoft used two keys, a primary and a spare, either of which can create valid signatures. Microsoft had failed to remove the debugging symbols in ADVAPI32.DLL, a security and encryption driver, when it released Service Pack 5 for Windows NT 4.0, and Andrew Fernandes, chief scientist with Cryptonym, found the primary key stored in the variable _KEY and the second key was labelled _NSAKEY. Fernandes published his discovery, touching off a flurry of speculation and conspiracy theories, including the possibility that the second key was owned by the United States National Security Agency (the NSA) and allowed the intelligence agency to subvert any Windows user's security.

As we can see, the entire process is overseen or approved in compliance with the same bureaucratic offshoots of agencies and departments involved in the National Security mantra, as justification for every action that is taken in all of these matters. Also of course, many of these occurrences and controversies are instantly and widely denounced as paranoid ‘conspiracy theories’ without any real investigation to prove otherwise (only denial).

Source

Microsoft themselves published an official response with regards to the allegations of a probable NSA backdoor embedded within windows, put forward by Andrew D. Fernandes.

At the time Microsoft denied all allegations in full stating; “Microsoft does not leave "back doors" in our products. This is in keeping with our historical stance on this issue. For instance, we have opposed the various key escrow proposals that have been suggested by the government, because we don't believe they are in the best interests of consumers or the industry.” With all the recent and ongoing revelations however, we now know this was most likely not the case. Who knew what, and how much they knew, is of course a matter for debate….

In a very interesting series of email correspondence published on cryptome.org, a discussion between Duncan Campbell Electronic Privacy Information Center and Microsoft’s Richard Purcell and Scott Culp took place at the time of the controversy, discussing the _NSAKEY debate.

There seems to have been a lot of circling and direct avoidance of more in depth questions, after initially answering a lot of concerns about the _NSAKEY itself. Then finally, a completer lack of response once the questions got a little too difficult.

Microsoft has since of course, publicly acknowledged that NSA backdoors or ‘exploits’ were and have been inserted within its operating system, by stating that they have now patched “most” of them against further vulnerabilities and exploits.

What I found interesting myself, is this mission statement that can be found on the NSA’s own website on what “research they do”.

Source

To me this reads as the exact accusations that have been levelled at the agency and corporations such as Microsoft, who publicly deny any such covert behaviour!

It’s a game of cat and mouse of PR hysteria and denial, until eventually the revelations are brought out into the public sphere and proven accurate on many occasions. A very effective tactic and time wasting exercise until it’s too late and the damage has already been done. It seems to me that these entities are only too happy to collude to effect the changes they are after, in the direct opposition of public debate and the breaching of all privacy laws against the citizenry of the world.

---

For more reading on the widespread use and likelihood of backdoors embedded within the windows operating system since its inception, I suggest reading some of the articles listed below.

How NSA access was built into Windows

HOW A CRYPTO 'BACKDOOR' PITTED THE TECH WORLD AGAINST THE NSA

Microsoft: NSA snooping? Code backdoors? Our hands are clean!

Microsoft handed the NSA access to encrypted messages

NSA Built Back Door In All Windows Software by 1999

NSA has total access via Microsoft Windows

Microsoft gives NSA backdoor, complains about exploits

---

---

         
         
         

As always, have a great day and PEACE