The Great SIM Heist: How Spies Stole the Keys to the Encryption Castle

NSA har i samarbejde med GCHQ stjålet krypteringsnøglerne til massevis (milliarder?) af SIM-kort der er blevet brugt verden over af mobiltelefonkun...

Peter Bjørn,

20/02/2015

NSA har i samarbejde med GCHQ stjålet krypteringsnøglerne til massevis (milliarder?) af SIM-kort der er blevet brugt verden over af mobiltelefonkunder.


"The company targeted by the intelligence agencies, Gemalto, is a multinational firm incorporated in the Netherlands that makes the chips used in mobile phones and next-generation credit cards. Among its clients are AT&T, T-Mobile, Verizon, Sprint and some 450 wireless network providers around the world. The company operates in 85 countries and has more than 40 manufacturing facilities. One of its three global headquarters is in Austin, Texas and it has a large factory in Pennsylvania. In all, Gemalto produces some 2 billion SIM cards a year. Its motto is “Security to be Free.”"

"One of the creators of the encryption protocol that is widely used today for securing emails, Adi Shamir, famously asserted: “Cryptography is typically bypassed, not penetrated.” In other words, it is much easier (and sneakier) to open a locked door when you have the key than it is to break down the door using brute force. While the NSA and GCHQ have substantial resources dedicated to breaking encryption, it is not the only way — and certainly not always the most efficient — to get at the data they want. “NSA has more mathematicians on its payroll than any other entity in the U.S.,” says the ACLU’s Soghoian. “But the NSA’s hackers are way busier than its mathematicians.”"



Efterretningstjenesterne har således slet ikke brug for at spørge retssystemerne om lov til at overvåge privat kommunikation - de kan ganske simpelt lægge øre til det med egne metoder.