NSA Cryptographic Backdoors — Dual_EC_DRBG, BULLRUN and Standards Sabotage

Backdoors cryptographiques NSA — Dual_EC_DRBG, BULLRUN et sabotage des standards

Part. corroborated
0.8
Credibility score
Surveillance & Tech Confirmed

Summary

The NSA systematically weakened global cryptographic standards. Dual_EC_DRBG: pseudo-random number generator with a probable backdoor pushed into NIST standards. RSA Security received $10M from the NSA to adopt it by default. BULLRUN program: ~ $250M/year to subvert crypto protections. The NIST withdrew Dual_EC_DRBG in 2014.

Key claims

1

Dual_EC_DRBG contenait une backdoor NSA [ESTABLISHED — consensus cryptographes, Shumow-Ferguson 2007]

2

NSA a paye 10M$ a RSA Security pour adopter Dual_EC_DRBG [ESTABLISHED — Reuters dec 2013]

3

Programme BULLRUN: ~250M$/an pour affaiblir crypto [ESTABLISHED — documents Snowden]

4

NSA a infiltre les processus NIST [ESTABLISHED — NIST a retire l'algo en 2014]

5

Backdoors dans processeurs Intel (ME) [HYPOTHESIS — non prouve]

6

_NSAKEY dans Windows NT (1999) [HYPOTHESIS — Microsoft nie, debat non tranche]

Evidence FOR (4)

Analyse Shumow-Ferguson (Crypto 2007): structure mathematique compatible avec backdoor

Documents Snowden: BULLRUN et efforts de subversion crypto (sept 2013)

Reuters: RSA a confirme paiement NSA pour Dual_EC_DRBG (dec 2013)

NIST SP 800-90A Rev.1 (2014): retrait de Dual_EC_DRBG

Factchecks (1)

FC-0133 VRAI 50% Le Factchecker 2026-02-28

Claim checked

La NSA a saboté des standards cryptographiques

Theory network Open in explorer →

This theory Actor Linked theory

Key actors (5)

NSA / Signals Intelligence Directorate
Architecte BULLRUN, promoteur Dual_EC_DRBG
NIST
Institut standardisation dont le processus a ete subverti
RSA Security
A accepte 10M$ pour implementer l'algo compromis
Dan Shumow & Niels Ferguson
Ont presente les faiblesses a Crypto 2007
Bruce Schneier
Cryptographe, premier a alerter publiquement

Connected theories (5)

Surveillance de masse NSA — PRISM, XKeyscore et l'infrastructure mondiale d'espionnage
0.8
Intelligence THEORY-1001
Bitcoin — Liberation ou Piege NSA ?
0.8
Intelligence THEORY-0931
Panopticon numerique — Convergence surveillance etatique et corporate
0.85
Cover-up THEORY-1012
Complexe militaro-numerique — In-Q-Tel, Palantir et l'alliance tech-renseignement
0.8
Intelligence THEORY-1014
Vault 7 — Outils de piratage CIA et capacite de faux drapeaux numeriques
0.8
Intelligence THEORY-1011

Document corpus

Total documents 76
0
Document types
EFTA: 76

Sources (4)

Reuters, 'Secret contract tied NSA and security industry pioneer' (Dec 2013) [PRIMARY]
The Guardian / New York Times, 'NSA BULLRUN program' revelations (Sep 2013) [PRIMARY]
NIST, withdrawal of Dual_EC_DRBG recommendation (April 2014) [PRIMARY]
Bruce Schneier, 'Did NSA Put a Secret Backdoor in New Encryption Standard?', Wired (Nov 2007) [PRIMARY]