SherbyNet - /page/wikibook/entry.mu

Micron Document

<!DOCTYPE html>

<title>Bullrun (decryption program)</title>

</head>

Bullrun (decryption program)

</h1>

</header>

/* start https://en.wikipedia.org/ */

.mw-parser-output .hlist dl,.mw-parser-output .hlist ol,.mw-parser-output .hlist ul{margin:0;padding:0}.mw-parser-output .hlist dd,.mw-parser-output .hlist dt,.mw-parser-output .hlist li{margin:0;display:inline}.mw-parser-output .hlist.inline,.mw-parser-output .hlist.inline dl,.mw-parser-output .hlist.inline ol,.mw-parser-output .hlist.inline ul,.mw-parser-output .hlist dl dl,.mw-parser-output .hlist dl ol,.mw-parser-output .hlist dl ul,.mw-parser-output .hlist ol dl,.mw-parser-output .hlist ol ol,.mw-parser-output .hlist ol ul,.mw-parser-output .hlist ul dl,.mw-parser-output .hlist ul ol,.mw-parser-output .hlist ul ul{display:inline}.mw-parser-output .hlist .mw-empty-li{display:none}.mw-parser-output .hlist dt::after{content:": "}.mw-parser-output .hlist dd::after,.mw-parser-output .hlist li::after{content:" · ";font-weight:bold}.mw-parser-output .hlist dd:last-child::after,.mw-parser-output .hlist dt:last-child::after,.mw-parser-output .hlist li:last-child::after{content:none}.mw-parser-output .hlist dd dd:first-child::before,.mw-parser-output .hlist dd dt:first-child::before,.mw-parser-output .hlist dd li:first-child::before,.mw-parser-output .hlist dt dd:first-child::before,.mw-parser-output .hlist dt dt:first-child::before,.mw-parser-output .hlist dt li:first-child::before,.mw-parser-output .hlist li dd:first-child::before,.mw-parser-output .hlist li dt:first-child::before,.mw-parser-output .hlist li li:first-child::before{content:" (";font-weight:normal}.mw-parser-output .hlist dd dd:last-child::after,.mw-parser-output .hlist dd dt:last-child::after,.mw-parser-output .hlist dd li:last-child::after,.mw-parser-output .hlist dt dd:last-child::after,.mw-parser-output .hlist dt dt:last-child::after,.mw-parser-output .hlist dt li:last-child::after,.mw-parser-output .hlist li dd:last-child::after,.mw-parser-output .hlist li dt:last-child::after,.mw-parser-output .hlist li li:last-child::after{content:")";font-weight:normal}.mw-parser-output .hlist ol{counter-reset:listitem}.mw-parser-output .hlist ol>li{counter-increment:listitem}.mw-parser-output .hlist ol>li::before{content:" "counter(listitem)"\a0 "}.mw-parser-output .hlist dd ol>li:first-child::before,.mw-parser-output .hlist dt ol>li:first-child::before,.mw-parser-output .hlist li ol>li:first-child::before{content:" ("counter(listitem)"\a0 "}

/* end https://en.wikipedia.org/ */

</style><style data-mw-deduplicate="TemplateStyles:r1246091330">

/* start https://en.wikipedia.org/ */

.mw-parser-output .sidebar{width:22em;float:right;clear:right;margin:0.5em 0 1em 1em;background:var(--background-color-neutral-subtle,#f8f9fa);border:1px solid var(--border-color-base,#a2a9b1);padding:0.2em;text-align:center;line-height:1.4em;font-size:88%;border-collapse:collapse;display:table}body.skin-minerva .mw-parser-output .sidebar{display:table!important;float:right!important;margin:0.5em 0 1em 1em!important}.mw-parser-output .sidebar-subgroup{width:100%;margin:0;border-spacing:0}.mw-parser-output .sidebar-left{float:left;clear:left;margin:0.5em 1em 1em 0}.mw-parser-output .sidebar-none{float:none;clear:both;margin:0.5em 1em 1em 0}.mw-parser-output .sidebar-outer-title{padding:0 0.4em 0.2em;font-size:125%;line-height:1.2em;font-weight:bold}.mw-parser-output .sidebar-top-image{padding:0.4em}.mw-parser-output .sidebar-top-caption,.mw-parser-output .sidebar-pretitle-with-top-image,.mw-parser-output .sidebar-caption{padding:0.2em 0.4em 0;line-height:1.2em}.mw-parser-output .sidebar-pretitle{padding:0.4em 0.4em 0;line-height:1.2em}.mw-parser-output .sidebar-title,.mw-parser-output .sidebar-title-with-pretitle{padding:0.2em 0.8em;font-size:145%;line-height:1.2em}.mw-parser-output .sidebar-title-with-pretitle{padding:0.1em 0.4em}.mw-parser-output .sidebar-image{padding:0.2em 0.4em 0.4em}.mw-parser-output .sidebar-heading{padding:0.1em 0.4em}.mw-parser-output .sidebar-content{padding:0 0.5em 0.4em}.mw-parser-output .sidebar-content-with-subgroup{padding:0.1em 0.4em 0.2em}.mw-parser-output .sidebar-above,.mw-parser-output .sidebar-below{padding:0.3em 0.8em;font-weight:bold}.mw-parser-output .sidebar-collapse .sidebar-above,.mw-parser-output .sidebar-collapse .sidebar-below{border-top:1px solid #aaa;border-bottom:1px solid #aaa}.mw-parser-output .sidebar-navbar{text-align:right;font-size:115%;padding:0 0.4em 0.4em}.mw-parser-output .sidebar-list-title{padding:0 0.4em;text-align:left;font-weight:bold;line-height:1.6em;font-size:105%}.mw-parser-output .sidebar-list-title-c{padding:0 0.4em;text-align:center;margin:0 3.3em}@media(max-width:640px){body.mediawiki .mw-parser-output .sidebar{width:100%!important;clear:both;float:none!important;margin-left:0!important;margin-right:0!important}}body.skin--responsive .mw-parser-output .sidebar a>img{max-width:none!important}@media screen{html.skin-theme-clientpref-night .mw-parser-output .sidebar:not(.notheme) .sidebar-list-title,html.skin-theme-clientpref-night .mw-parser-output .sidebar:not(.notheme) .sidebar-title-with-pretitle{background:transparent!important}html.skin-theme-clientpref-night .mw-parser-output .sidebar:not(.notheme) .sidebar-title-with-pretitle a{color:var(--color-progressive)!important}}@media screen and (prefers-color-scheme:dark){html.skin-theme-clientpref-os .mw-parser-output .sidebar:not(.notheme) .sidebar-list-title,html.skin-theme-clientpref-os .mw-parser-output .sidebar:not(.notheme) .sidebar-title-with-pretitle{background:transparent!important}html.skin-theme-clientpref-os .mw-parser-output .sidebar:not(.notheme) .sidebar-title-with-pretitle a{color:var(--color-progressive)!important}}@media print{body.ns-0 .mw-parser-output .sidebar{display:none!important}}

/* end https://en.wikipedia.org/ */

</style><table class="sidebar sidebar-collapse nomobile nowraplinks"><tbody><tr><th class="sidebar-title"> <a href="National_Security_Agency" title="National Security Agency">National Security Agency</a> surveillance</th></tr><tr><td class="sidebar-image"><div class="sidebar-caption"><a href="Boundless_Informant" title="Boundless Informant">Map of global NSA data collection</a> as of 2007, with countries subject to the most data collection shown in red</div></td></tr><tr><td class="sidebar-content">

<div class="sidebar-list mw-collapsible mw-collapsed"><div class="sidebar-list-title" style="color: var(--color-base)">Programs</div><div class="sidebar-list-content mw-collapsible-content hlist">

<ul><li><a href="ECHELON" title="ECHELON">ECHELON</a></li>

<li><a href="Project_MINARET" title="Project MINARET">MINARET</a></li>

<li><a href="Project_SHAMROCK" title="Project SHAMROCK">SHAMROCK</a></li>

<li><a href="PROMIS_(intelligence_software)" class="mw-redirect" title="PROMIS (intelligence software)">PROMIS</a></li></ul>

<dl><dt>Since 1978</dt></dl>

<ul><li><a href="Upstream_collection" title="Upstream collection">Upstream collection</a></li>

<li><a href="Blarney_(code_name)" title="Blarney (code name)">BLARNEY</a></li>

<li><a href="Fairview_(surveillance_program)" title="Fairview (surveillance program)">FAIRVIEW</a></li>

<li><a href="ThinThread" title="ThinThread">ThinThread</a></li>

<li><a href="Project_Genoa" title="Project Genoa">Genoa</a></li></ul>

<dl><dt>Since 1990</dt></dl>

<ul><li><a href="RAMPART-A" title="RAMPART-A">RAMPART-A</a></li></ul>

<dl><dt>Since 1998</dt></dl>

<ul><li><a href="Tailored_Access_Operations" title="Tailored Access Operations">Tailored Access Operations</a></li></ul>

<dl><dt>Since 2001</dt></dl>

<ul><li><a href="OAKSTAR" title="OAKSTAR">OAKSTAR</a></li>

<li><a href="STORMBREW" title="STORMBREW">STORMBREW</a></li>

<li><a href="Trailblazer_Project" title="Trailblazer Project">Trailblazer</a></li>

<li><a href="Turbulence_(NSA)" title="Turbulence (NSA)">Turbulence</a></li>

<li><a href="Project_Genoa_II" title="Project Genoa II">Genoa II</a></li>

<li><a href="Total_Information_Awareness" title="Total Information Awareness">Total Information Awareness</a></li>

<li><a href="President's_Surveillance_Program" title="President's Surveillance Program">President's Surveillance Program</a>

<ul><li><a href="Terrorist_Surveillance_Program" title="Terrorist Surveillance Program">Terrorist Surveillance Program</a></li></ul></li></ul>

<dl><dt>Since 2007</dt></dl>

<ul><li><a href="PRISM" title="PRISM">PRISM</a></li>

<li><a href="Dropmire" title="Dropmire">Dropmire</a></li>

<li><a href="Stateroom_(surveillance_program)" title="Stateroom (surveillance program)">Stateroom</a></li>

<li><a href="MYSTIC_(surveillance_program)" class="mw-redirect" title="MYSTIC (surveillance program)">MYSTIC</a></li></ul>

<dl><dt>Databases, tools etc.</dt></dl>

<ul><li><a href="PINWALE" class="mw-redirect" title="PINWALE">PINWALE</a></li>

<li><a href="MARINA" title="MARINA">MARINA</a></li>

<li><a href="MAINWAY" title="MAINWAY">MAINWAY</a></li>

<li><a href="TRAFFICTHIEF" title="TRAFFICTHIEF">TRAFFICTHIEF</a></li>

<li><a href="Dishfire" title="Dishfire">DISHFIRE</a></li>

<li><a href="XKeyscore" title="XKeyscore">XKeyscore</a></li>

<li><a href="ICREACH" title="ICREACH">ICREACH</a></li>

<li><a href="Boundless_Informant" title="Boundless Informant">BOUNDLESSINFORMANT</a></li></ul>

<dl><dt>GCHQ collaboration</dt></dl>

<ul><li><a href="MUSCULAR_(surveillance_program)" class="mw-redirect" title="MUSCULAR (surveillance program)">MUSCULAR</a></li>

<li><a href="Tempora" title="Tempora">Tempora</a></li></ul></div></div></td>

</tr><tr><td class="sidebar-content">

<div class="sidebar-list mw-collapsible mw-collapsed"><div class="sidebar-list-title" style="color: var(--color-base)">Legislation</div><div class="sidebar-list-content mw-collapsible-content hlist">

<ul><li><a href="Omnibus_Crime_Control_and_Safe_Streets_Act_of_1968#Wiretaps" title="Omnibus Crime Control and Safe Streets Act of 1968">Safe Streets Act</a></li>

<li><a href="Privacy_Act_of_1974" title="Privacy Act of 1974">Privacy Act of 1974</a></li>

<li><a href="Patriot_Act" title="Patriot Act">Patriot Act</a></li>

<li><a href="Homeland_Security_Act" class="mw-redirect" title="Homeland Security Act">Homeland Security Act</a></li>

<li><a href="Protect_America_Act_of_2007" title="Protect America Act of 2007">Protect America Act of 2007</a></li>

<li><a href="Foreign_Intelligence_Surveillance_Act_of_1978_Amendments_Act_of_2008" class="mw-redirect" title="Foreign Intelligence Surveillance Act of 1978 Amendments Act of 2008">FISA Amendments Act of 2008</a></li></ul></div></div></td>

</tr><tr><td class="sidebar-content">

<div class="sidebar-list mw-collapsible mw-collapsed"><div class="sidebar-list-title" style="color: var(--color-base)">Institutions</div><div class="sidebar-list-content mw-collapsible-content hlist">

<li><a href="Senate_Intelligence_Committee" class="mw-redirect" title="Senate Intelligence Committee">Senate Intelligence Committee</a></li>

<li><a href="United_States_National_Security_Council" title="United States National Security Council">National Security Council</a></li></ul></div></div></td>

</tr><tr><td class="sidebar-content">

<div class="sidebar-list mw-collapsible mw-collapsed"><div class="sidebar-list-title" style="color: var(--color-base)">Lawsuits</div><div class="sidebar-list-content mw-collapsible-content hlist">

<li><a href="Hepting_v._AT%26T" title="Hepting v. AT&T">Hepting v. AT&T</a></li>

<li><a href="Jewel_v._NSA" class="mw-redirect" title="Jewel v. NSA">Jewel v. NSA</a></li>

<li><a href="Clapper_v._Amnesty_International" class="mw-redirect" title="Clapper v. Amnesty International">Clapper v. Amnesty</a></li>

<li><a href="Klayman_v._Obama" title="Klayman v. Obama">Klayman v. Obama</a></li>

<li><a href="ACLU_v._Clapper" class="mw-redirect" title="ACLU v. Clapper">ACLU v. Clapper</a></li>

<li><a href="Wikimedia_v._NSA" class="mw-redirect" title="Wikimedia v. NSA">Wikimedia v. NSA</a></li>

<li><a href="United_States_v._Moalin" title="United States v. Moalin">US v. Moalin</a></li></ul></div></div></td>

</tr><tr><td class="sidebar-content">

<div class="sidebar-list mw-collapsible mw-collapsed"><div class="sidebar-list-title" style="color: var(--color-base)">Whistleblowers</div><div class="sidebar-list-content mw-collapsible-content hlist">

<ul><li><a href="William_Binney_(U.S._intelligence_official)" class="mw-redirect" title="William Binney (U.S. intelligence official)">William Binney</a></li>

<li><a href="Thomas_Andrews_Drake" class="mw-redirect" title="Thomas Andrews Drake">Thomas Drake</a></li>

<li><a href="Mark_Klein" title="Mark Klein">Mark Klein</a></li>

<li><a href="Thomas_Tamm" title="Thomas Tamm">Thomas Tamm</a></li>

<li><a href="Edward_Snowden" title="Edward Snowden">Edward Snowden</a></li></ul></div></div></td>

</tr><tr><td class="sidebar-content">

<div class="sidebar-list mw-collapsible mw-collapsed"><div class="sidebar-list-title" style="color: var(--color-base)">Publication</div><div class="sidebar-list-content mw-collapsible-content hlist">

<ul><li><a href="NSA_warrantless_surveillance_(2001%E2%80%9307)" class="mw-redirect" title="NSA warrantless surveillance (2001–07)">2005 warrantless surveillance scandal</a></li>

<li><a href="Global_surveillance_disclosures_(2013%E2%80%93present)" class="mw-redirect" title="Global surveillance disclosures (2013–present)">Global surveillance disclosures (2013–present)</a></li></ul></div></div></td>

</tr><tr><td class="sidebar-content">

<div class="sidebar-list mw-collapsible mw-collapsed"><div class="sidebar-list-title" style="color: var(--color-base)">Related</div><div class="sidebar-list-content mw-collapsible-content hlist">

<ul><li><a href="Cablegate" class="mw-redirect" title="Cablegate">Cablegate</a></li>

<li><a href="2013_Department_of_Justice_investigations_of_reporters" class="mw-redirect" title="2013 Department of Justice investigations of reporters">Surveillance of reporters</a></li>

<li><a href="Mail_Isolation_Control_and_Tracking" title="Mail Isolation Control and Tracking">Mail tracking</a></li>

<li><a href="Spying_on_United_Nations_leaders_by_United_States_diplomats" class="mw-redirect" title="Spying on United Nations leaders by United States diplomats">UN diplomatic spying</a></li>

<li><a href="Insider_Threat_Program" title="Insider Threat Program">Insider Threat Program</a></li>

<li><a href="Mass_surveillance_in_the_United_States" title="Mass surveillance in the United States">Mass surveillance in the United States</a></li>

<li><a href="Mass_surveillance_in_the_United_Kingdom" title="Mass surveillance in the United Kingdom">Mass surveillance in the United Kingdom</a></li></ul></div></div></td>

</tr><tr><td class="sidebar-content">

<div class="sidebar-list mw-collapsible mw-collapsed"><div class="sidebar-list-title" style="color: var(--color-base)">Concepts</div><div class="sidebar-list-content mw-collapsible-content hlist">

<ul><li><a href="Signals_intelligence" title="Signals intelligence">SIGINT</a></li>

<li><a href="Metadata" title="Metadata">Metadata</a></li></ul></div></div></td>

</tr><tr><td class="sidebar-content">

<div class="sidebar-list mw-collapsible mw-collapsed"><div class="sidebar-list-title" style="color: var(--color-base)">Collaboration</div><div class="sidebar-list-content mw-collapsible-content hlist">

<dl><dt>United States</dt></dl>

<li> <a href="United_States_Cyber_Command" title="United States Cyber Command">CYBERCOM</a></li>

<dl><dt>Other</dt></dl>

</tr><tr><td class="sidebar-navbar"><style data-mw-deduplicate="TemplateStyles:r1239400231">

/* start https://en.wikipedia.org/ */

.mw-parser-output .navbar{display:inline;font-size:88%;font-weight:normal}.mw-parser-output .navbar-collapse{float:left;text-align:left}.mw-parser-output .navbar-boxtext{word-spacing:0}.mw-parser-output .navbar ul{display:inline-block;white-space:nowrap;line-height:inherit}.mw-parser-output .navbar-brackets::before{margin-right:-0.125em;content:"[ "}.mw-parser-output .navbar-brackets::after{margin-left:-0.125em;content:" ]"}.mw-parser-output .navbar li{word-spacing:-0.125em}.mw-parser-output .navbar a>span,.mw-parser-output .navbar a>abbr{text-decoration:inherit}.mw-parser-output .navbar-mini abbr{font-variant:small-caps;border-bottom:none;text-decoration:none;cursor:inherit}.mw-parser-output .navbar-ct-full{font-size:114%;margin:0 7em}.mw-parser-output .navbar-ct-mini{font-size:114%;margin:0 4em}html.skin-theme-clientpref-night .mw-parser-output .navbar li a abbr{color:var(--color-base)!important}@media(prefers-color-scheme:dark){html.skin-theme-clientpref-os .mw-parser-output .navbar li a abbr{color:var(--color-base)!important}}@media print{.mw-parser-output .navbar{display:none!important}}

/* end https://en.wikipedia.org/ */

</style></td></tr></tbody></table>

Bullrun (stylized BULLRUN) is a <a href="Clandestine_operation" title="Clandestine operation">clandestine</a>, highly classified program to crack encryption of online communications and data, which is run by the United States <a href="National_Security_Agency" title="National Security Agency">National Security Agency</a> (NSA).<a href="#cite_note-guardian20130905-1">[1]</a><a href="#cite_note-pp20130905-2">[2]</a> The British <a href="Government_Communications_Headquarters" class="mw-redirect" title="Government Communications Headquarters">Government Communications Headquarters</a> (GCHQ) has a similar program codenamed Edgehill. According to the Bullrun classification guide published by <a href="The_Guardian" title="The Guardian">The Guardian</a>, the program uses multiple methods including computer network exploitation,<a href="#cite_note-3">[3]</a> <a href="Interdiction" title="Interdiction">interdiction</a>, industry relationships, collaboration with other <a href="United_States_Intelligence_Community" title="United States Intelligence Community">intelligence community</a> entities, and advanced mathematical techniques.

Information about the program's existence was leaked in 2013 by <a href="Edward_Snowden" title="Edward Snowden">Edward Snowden</a>. Although Snowden's documents do not contain technical information on exact cryptanalytic capabilities because Snowden did not have clearance access to such information,<a href="#cite_note-4">[4]</a> they do contain a 2010 <a href="GCHQ" title="GCHQ">GCHQ</a> presentation which claims that "vast amounts of encrypted Internet data which have up till now been discarded are now exploitable".<a href="#cite_note-guardian20130905-1">[1]</a> A number of technical details regarding the program found in Snowden's documents were additionally censored by the press at the behest of US intelligence officials.<a href="#cite_note-nytimes1-5">[5]</a> Out of all the programs that have been leaked by Snowden, the Bullrun Decryption Program is by far the most expensive. Snowden claims that since 2011, expenses devoted to Bullrun amount to $800 million. The leaked documents reveal that Bullrun seeks to "defeat the encryption used in specific network communication technologies".<a href="#cite_note-6">[6]</a>

<div class="mw-heading mw-heading2"><h2 id="Naming_and_access">Naming and access</h2></div>

According to the NSA's Bullrun Classification Guide, Bullrun is not a <a href="Sensitive_Compartmented_Information" class="mw-redirect" title="Sensitive Compartmented Information">Sensitive Compartmented Information</a> (SCI) control system or compartment, but the codeword has to be shown in the classification line, after all other classification and dissemination markings. Furthermore, any details about specific cryptographic successes were recommended to be additionally restricted (besides being marked <a href="Top_Secret" class="mw-redirect" title="Top Secret">Top Secret</a>//<a href="Special_Intelligence" class="mw-redirect" title="Special Intelligence">SI</a>) with <a href="Exceptionally_Controlled_Information" class="mw-redirect" title="Exceptionally Controlled Information">Exceptionally Controlled Information</a> labels; a non-exclusive list of possible Bullrun ECI labels was given as: APERIODIC, AMBULANT, AUNTIE, PAINTEDEAGLE, PAWLEYS, PITCHFORD, PENDLETON, PICARESQUE, and PIEDMONT without any details as to what these labels mean.<a href="#cite_note-guardian20130905-1">[1]</a><a href="#cite_note-pp20130905-2">[2]</a>

Access to the program is limited to a group of top personnel at the <a href="Five_Eyes" title="Five Eyes">Five Eyes</a> (FVEY), the NSA and the <a href="Signals_intelligence" title="Signals intelligence">signals intelligence</a> agencies of the United Kingdom (<a href="GCHQ" title="GCHQ">GCHQ</a>), Canada (<a href="Communications_Security_Establishment" title="Communications Security Establishment">CSE</a>), Australia (<a href="Australian_Signals_Directorate" title="Australian Signals Directorate">ASD</a>), and New Zealand (<a href="GCSB" class="mw-redirect" title="GCSB">GCSB</a>). Signals that cannot be decrypted with current technology may be retained indefinitely while the agencies continue to attempt to decrypt them.<a href="#cite_note-pp20130905-2">[2]</a>

<div class="mw-heading mw-heading2"><h2 id="Methods">Methods</h2></div>

Through the NSA-designed <a href="Clipper_chip" title="Clipper chip">Clipper chip</a>, which used the <a href="Skipjack_(cipher)" title="Skipjack (cipher)">Skipjack</a> cipher with an intentional backdoor, and using various specifically designed laws such as <a href="Communications_Assistance_for_Law_Enforcement_Act" title="Communications Assistance for Law Enforcement Act">CALEA</a>, <a href="Cyberspace_Electronic_Security_Act" title="Cyberspace Electronic Security Act">CESA</a> and <a href="Export_of_cryptography_from_the_United_States" title="Export of cryptography from the United States">restrictions on export of encryption software</a> as evidenced by <a href="Bernstein_v._United_States" title="Bernstein v. United States">Bernstein v. United States</a>, the U.S. government had publicly attempted in the 1990s to ensure its access to communications and ability to decrypt.<a href="#cite_note-reason-cesa-7">[7]</a><a href="#cite_note-epic-keyescrow-8">[8]</a> In particular, technical measures such as <a href="Key_escrow" title="Key escrow">key escrow</a>, a euphemism for a <a href="Backdoor_(computing)" title="Backdoor (computing)">backdoor</a>, have met with criticism and little success.

The NSA encourages the manufacturers of security technology to disclose backdoors to their products or encryption keys so that they may access the encrypted data.<a href="#cite_note-9">[9]</a> However, fearing widespread adoption of encryption, the NSA set out to stealthily influence and weaken encryption standards and obtain master keys—either by agreement, by force of law, or by computer network exploitation (<a href="Hacker_(computer_security)" class="mw-redirect" title="Hacker (computer security)">hacking</a>).<a href="#cite_note-nytimes1-5">[5]</a>

According to a Bullrun briefing document, the agency had successfully infiltrated both the <a href="Secure_Sockets_Layer" class="mw-redirect" title="Secure Sockets Layer">Secure Sockets Layer</a> as well as some <a href="Virtual_private_networks" class="mw-redirect" title="Virtual private networks">virtual private networks</a> (VPNs).<a href="#cite_note-guardian20130905-1">[1]</a><a href="#cite_note-pp20130905-2">[2]</a> The New York Times reported that: "But by 2006, an N.S.A. document notes, the agency had broken into communications for three foreign airlines, one travel reservation system, one foreign government's nuclear department and another's Internet service by cracking the virtual private networks that protected them. By 2010, the Edgehill program, the British counterencryption effort, was unscrambling VPN traffic for 30 targets and had set a goal of an additional 300."<a href="#cite_note-nytimes1-5">[5]</a>

As part of Bullrun, NSA has also been actively working to "Insert vulnerabilities into commercial encryption systems, IT systems, networks, and endpoint communications devices used by targets".<a href="#cite_note-10">[10]</a> The New York Times has reported that the random number generator <a href="Dual_EC_DRBG" title="Dual EC DRBG">Dual_EC_DRBG</a> contains a back door, which would allow the NSA to break encryption keys generated by the random number generator.<a href="#cite_note-11">[11]</a> Even though this random number generator was known to be insecure and slow soon after the standard was published, and a potential NSA <a href="Kleptographic" class="mw-redirect" title="Kleptographic">kleptographic</a> backdoor was found in 2007 while alternative random number generators without these flaws were certified and widely available, <a href="RSA_Security" title="RSA Security">RSA Security</a> continued using Dual_EC_DRBG in the company's <a href="BSAFE_toolkit" class="mw-redirect" title="BSAFE toolkit">BSAFE toolkit</a> and Data Protection Manager until September 2013. While RSA Security has denied knowingly inserting a backdoor into BSAFE, it has not yet given an explanation for the continued usage of Dual_EC_DRBG after its flaws became apparent in 2006 and 2007.<a href="#cite_note-green-12">[12]</a> It was reported on December 20, 2013, that RSA had accepted a payment of $10 million from the NSA to set the random number generator as the default.<a href="#cite_note-RSApaid-13">[13]</a><a href="#cite_note-14">[14]</a> Leaked NSA documents state that their effort was “a challenge in finesse” and that “Eventually, N.S.A. became the sole editor” of the standard.<a href="#cite_note-nytimes1-5">[5]</a>

By 2010, the leaked documents state that the NSA had developed "groundbreaking capabilities" against encrypted Internet traffic. A GCHQ document warned however "These capabilities are among the <a href="Signals_intelligence" title="Signals intelligence">SIGINT</a> community's most fragile, and the inadvertent disclosure of the simple 'fact of' could alert the adversary and result in immediate loss of the capability."<a href="#cite_note-nytimes1-5">[5]</a> The document later states that "there will be NO '<a href="Need_to_know" title="Need to know">need to know</a>.'"<a href="#cite_note-nytimes1-5">[5]</a> Several experts, including <a href="Bruce_Schneier" title="Bruce Schneier">Bruce Schneier</a> and <a href="Christopher_Soghoian" title="Christopher Soghoian">Christopher Soghoian</a>, had speculated that a successful attack against <a href="RC4" title="RC4">RC4</a>, an encryption algorithm used in at least 50 percent of all SSL/TLS traffic at the time, was a plausible avenue, given several publicly known <a href="RC4#Security" title="RC4">weaknesses</a> of RC4.<a href="#cite_note-15">[15]</a> Others have speculated that NSA has gained ability to crack 1024-bit <a href="RSA_(cryptosystem)" class="mw-redirect" title="RSA (cryptosystem)">RSA</a>/<a href="Diffie%E2%80%93Hellman_key_exchange" title="Diffie–Hellman key exchange">DH</a> keys.<a href="#cite_note-16">[16]</a> RC4 has since been prohibited for all versions of TLS by RFC 7465 in 2015, due to the <a href="Transport_Layer_Security#RC4_attacks" title="Transport Layer Security">RC4 attacks</a> weakening or breaking RC4 used in SSL/TLS.

<div class="mw-heading mw-heading2"><h2 id="Fallout">Fallout</h2></div>

In the wake of Bullrun revelations, some open source projects, including <a href="FreeBSD" title="FreeBSD">FreeBSD</a> and <a href="OpenSSL" title="OpenSSL">OpenSSL</a>, have seen an increase in their reluctance to (fully) trust hardware-based <a href="Cryptographic_primitive" title="Cryptographic primitive">cryptographic primitives</a>.<a href="#cite_note-17">[17]</a><a href="#cite_note-18">[18]</a>

Many other software projects, companies and organizations responded with an increase in the evaluation of their security and encryption processes. For example, Google doubled the size of their TLS certificates from 1024 bits to 2048 bits.<a href="#cite_note-19">[19]</a>

Revelations of the NSA backdoors and purposeful complication of standards has led to a backlash in their participation in standards bodies.<a href="#cite_note-20">[20]</a> Prior to the revelations the NSA's presence on these committees was seen as a benefit given their expertise with encryption.<a href="#cite_note-21">[21]</a>

There has been speculation that the NSA was aware of the <a href="Heartbleed" title="Heartbleed">Heartbleed</a> bug, which caused major websites to be vulnerable to password theft, but did not reveal this information in order to exploit it themselves.<a href="#cite_note-22">[22]</a>

<div class="mw-heading mw-heading2"><h2 id="Etymology">Etymology</h2></div>

The name "Bullrun" was taken from the <a href="First_Battle_of_Bull_Run" title="First Battle of Bull Run">First Battle of Bull Run</a>, the first major battle of the <a href="American_Civil_War" title="American Civil War">American Civil War</a>.<a href="#cite_note-guardian20130905-1">[1]</a> Its predecessor "Manassas",<a href="#cite_note-pp20130905-2">[2]</a> is both an alternate name for the battle and where the battle took place. "EDGEHILL" is from the <a href="Battle_of_Edgehill" title="Battle of Edgehill">Battle of Edgehill</a>, the first battle of the <a href="English_Civil_War" title="English Civil War">English Civil War</a>.<a href="#cite_note-BBC-23">[23]</a>

/* start https://en.wikipedia.org/ */

.mw-parser-output .portalbox{padding:0;margin:0.5em 0;display:table;box-sizing:border-box;max-width:175px;list-style:none}.mw-parser-output .portalborder{border:1px solid var(--border-color-base,#a2a9b1);padding:0.1em;background:var(--background-color-neutral-subtle,#f8f9fa)}.mw-parser-output .portalbox-entry{display:table-row;font-size:85%;line-height:110%;height:1.9em;font-style:italic;font-weight:bold}.mw-parser-output .portalbox-image{display:table-cell;padding:0.2em;vertical-align:middle;text-align:center}.mw-parser-output .portalbox-link{display:table-cell;padding:0.2em 0.2em 0.2em 0.3em;vertical-align:middle}@media(min-width:720px){.mw-parser-output .portalleft{margin:0.5em 1em 0.5em 0}.mw-parser-output .portalright{clear:right;float:right;margin:0.5em 0 0.5em 1em}}

/* end https://en.wikipedia.org/ */

</style>

<ul><li><a href="HTTPS" title="HTTPS">HTTPS</a></li>

<li><a href="IPsec" title="IPsec">IPsec</a></li>

<li><a href="Mass_surveillance" title="Mass surveillance">Mass surveillance</a>

<ul><li><a href="Mass_surveillance_in_the_United_Kingdom" title="Mass surveillance in the United Kingdom">Mass surveillance in the United Kingdom</a></li>

<li><a href="Mass_surveillance_in_the_United_States" title="Mass surveillance in the United States">Mass surveillance in the United States</a></li></ul></li>

<li><a href="MUSCULAR" title="MUSCULAR">MUSCULAR</a></li>

<li><a href="PRISM_(surveillance_program)" class="mw-redirect" title="PRISM (surveillance program)">PRISM</a></li>

<li><a href="Tailored_Access_Operations" title="Tailored Access Operations">Tailored Access Operations</a></li>

<li><a href="Transport_Layer_Security" title="Transport Layer Security">Transport Layer Security</a></li>

<li><a href="Voice_over_IP" title="Voice over IP">Voice over IP</a></li></ul>

<div class="mw-heading mw-heading2"><h2 id="References">References</h2></div>

/* start https://en.wikipedia.org/ */

.mw-parser-output .reflist{margin-bottom:0.5em;list-style-type:decimal}@media screen{.mw-parser-output .reflist{font-size:90%}}.mw-parser-output .reflist .references{font-size:100%;margin-bottom:0;list-style-type:inherit}.mw-parser-output .reflist-columns-2{column-width:30em}.mw-parser-output .reflist-columns-3{column-width:25em}.mw-parser-output .reflist-columns{margin-top:0.3em}.mw-parser-output .reflist-columns ol{margin-top:0}.mw-parser-output .reflist-columns li{page-break-inside:avoid;break-inside:avoid-column}.mw-parser-output .reflist-upper-alpha{list-style-type:upper-alpha}.mw-parser-output .reflist-upper-roman{list-style-type:upper-roman}.mw-parser-output .reflist-lower-alpha{list-style-type:lower-alpha}.mw-parser-output .reflist-lower-greek{list-style-type:lower-greek}.mw-parser-output .reflist-lower-roman{list-style-type:lower-roman}

/* end https://en.wikipedia.org/ */

</style><div class="reflist reflist-columns references-column-width" style="column-width: 30em;">

/* start https://en.wikipedia.org/ */

.mw-parser-output cite.citation{font-style:inherit;word-wrap:break-word}.mw-parser-output .citation q{quotes:"\"""\"""'""'"}.mw-parser-output .citation:target{background-color:rgba(0,127,255,0.133)}.mw-parser-output .id-lock-free.id-lock-free a{background:url("./mw/Lock-green.svg")right 0.1em center/9px no-repeat}.mw-parser-output .id-lock-limited.id-lock-limited a,.mw-parser-output .id-lock-registration.id-lock-registration a{background:url("./mw/Lock-gray-alt-2.svg")right 0.1em center/9px no-repeat}.mw-parser-output .id-lock-subscription.id-lock-subscription a{background:url("./mw/Lock-red-alt-2.svg")right 0.1em center/9px no-repeat}.mw-parser-output .cs1-ws-icon a{background:url("./mw/Wikisource-logo.svg")right 0.1em center/12px no-repeat}body:not(.skin-timeless):not(.skin-minerva) .mw-parser-output .id-lock-free a,body:not(.skin-timeless):not(.skin-minerva) .mw-parser-output .id-lock-limited a,body:not(.skin-timeless):not(.skin-minerva) .mw-parser-output .id-lock-registration a,body:not(.skin-timeless):not(.skin-minerva) .mw-parser-output .id-lock-subscription a,body:not(.skin-timeless):not(.skin-minerva) .mw-parser-output .cs1-ws-icon a{background-size:contain;padding:0 1em 0 0}.mw-parser-output .cs1-code{color:inherit;background:inherit;border:none;padding:inherit}.mw-parser-output .cs1-hidden-error{display:none;color:var(--color-error,#d33)}.mw-parser-output .cs1-visible-error{color:var(--color-error,#d33)}.mw-parser-output .cs1-maint{display:none;color:#085;margin-left:0.3em}.mw-parser-output .cs1-kern-left{padding-left:0.2em}.mw-parser-output .cs1-kern-right{padding-right:0.2em}.mw-parser-output .citation .mw-selflink{font-weight:inherit}@media screen{.mw-parser-output .cs1-format{font-size:95%}html.skin-theme-clientpref-night .mw-parser-output .cs1-maint{color:#18911f}}@media screen and (prefers-color-scheme:dark){html.skin-theme-clientpref-os .mw-parser-output .cs1-maint{color:#18911f}}

/* end https://en.wikipedia.org/ */

</style><cite id="CITEREFBall,_JamesBorger,_JulianGreenwald,_Glenn2013" class="citation news cs1">Ball, James; Borger, Julian; <a href="Glenn_Greenwald" title="Glenn Greenwald">Greenwald, Glenn</a> (September 5, 2013). <a rel="nofollow" class="external text" href="https://www.theguardian.com/world/2013/sep/05/nsa-gchq-encryption-codes-security">"US and UK spy agencies defeat privacy and security on the internet"</a>. <a href="The_Guardian" title="The Guardian">The Guardian</a>.</cite>

</li>

<li id="cite_note-pp20130905-2">^ <a href="#cite_ref-pp20130905_2-0">a</a> <a href="#cite_ref-pp20130905_2-1">b</a> <a href="#cite_ref-pp20130905_2-2">c</a> <a href="#cite_ref-pp20130905_2-3">d</a> <a href="#cite_ref-pp20130905_2-4">e</a> <cite id="CITEREFPerlroth,_NicoleLarson,_JeffShane,_Scott2013" class="citation news cs1">Perlroth, Nicole; Larson, Jeff; Shane, Scott (September 5, 2013). <a rel="nofollow" class="external text" href="https://www.propublica.org/article/the-nsas-secret-campaign-to-crack-undermine-internet-encryption">"The NSA's Secret Campaign to Crack, Undermine Internet Security"</a>. <a href="ProPublica" title="ProPublica">ProPublica</a>.</cite>

</li>

<li id="cite_note-3"><a href="#cite_ref-3">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://www.schneier.com/blog/archives/2014/03/computer_networ.html">"Computer Network Exploitation vs. Computer Network Attack - Schneier on Security"</a>. www.schneier.com. Retrieved 2016-09-11.</cite>

</li>

<li id="cite_note-4"><a href="#cite_ref-4">^</a> <cite id="CITEREFSean_Michael_Kerner2013" class="citation web cs1">Sean Michael Kerner (2013-09-09). <a rel="nofollow" class="external text" href="http://www.eweek.com/blogs/security-watch/nsa-bullrun-911-and-why-enterprises-should-walk-before-they-run.html">"NSA Bullrun, 9/11 and Why Enterprises Should Walk Before They Run"</a>. Eweek.com. Retrieved 2014-01-23.</cite>

</li>

<li id="cite_note-nytimes1-5">^ <a href="#cite_ref-nytimes1_5-0">a</a> <a href="#cite_ref-nytimes1_5-1">b</a> <a href="#cite_ref-nytimes1_5-2">c</a> <a href="#cite_ref-nytimes1_5-3">d</a> <a href="#cite_ref-nytimes1_5-4">e</a> <a href="#cite_ref-nytimes1_5-5">f</a> <cite id="CITEREFPerlrothLarsonShane2013" class="citation news cs1">Perlroth, Nicole; Larson, Jeff; Shane, Scott (2013-09-05). <a rel="nofollow" class="external text" href="https://www.nytimes.com/2013/09/06/us/nsa-foils-much-internet-encryption.html?pagewanted=2&_r=1">"N.S.A. Able to Foil Basic Safeguards of Privacy on Web"</a>. New York Times. Retrieved 16 April 2015.</cite>

</li>

<li id="cite_note-6"><a href="#cite_ref-6">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="http://www.ibtimes.com/edward-snowden-reveals-secret-decryption-programs-10-things-you-need-know-about-bullrun-edgehill">"Edward Snowden Reveals Secret Decryption Programs"</a>. International Business Times. 2013-09-06. Retrieved 16 April 2015.</cite>

</li>

<li id="cite_note-reason-cesa-7"><a href="#cite_ref-reason-cesa_7-0">^</a> <cite id="CITEREFMike_Godwin2000" class="citation web cs1">Mike Godwin (May 2000). <a rel="nofollow" class="external text" href="http://reason.com/archives/2000/05/01/rendering-unto-cesa">"Rendering Unto CESA: Clinton's contradictory encryption policy"</a>. Reason. Retrieved 2013-09-09. <q>[...] there was an effort to regulate the use and sale of encryption tools, domestically and abroad. [...] By 1996, the administration had abandoned the Clipper Chip as such, but it continued to lobby both at home and abroad for software-based "key escrow" encryption standards.</q></cite>

</li>

<li id="cite_note-epic-keyescrow-8"><a href="#cite_ref-epic-keyescrow_8-0">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://epic.org/crypto/key_escrow/wh_cke_796.html">"Administration Statement on Commercial Encryption Policy"</a>. July 12, 1996. Retrieved 2013-09-09. <q>Although we do not control the use of encryption within the US, we do, with some exceptions, limit the export of non-escrowed mass market encryption to products using a key length of 40 bits.</q></cite>

</li>

<li id="cite_note-9"><a href="#cite_ref-9">^</a> ("NSA is Changing User's Internet Experience.") Info Security Institute

</li>

<li id="cite_note-10"><a href="#cite_ref-10">^</a> <cite class="citation news cs1"><a rel="nofollow" class="external text" href="https://www.nytimes.com/interactive/2013/09/05/us/documents-reveal-nsa-campaign-against-encryption.html">"Secret Documents Reveal N.S.A. Campaign Against Encryption"</a>. New York Times.</cite>

</li>

<li id="cite_note-11"><a href="#cite_ref-11">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://arstechnica.com/security/2013/09/new-york-times-provides-new-details-about-nsa-backdoor-in-crypto-spec/">"New York Times provides new details about NSA backdoor in crypto spec"</a>. Ars Technica. 2013.</cite>

</li>

<li id="cite_note-green-12"><a href="#cite_ref-green_12-0">^</a> <cite id="CITEREFMatthew_Green2013" class="citation web cs1">Matthew Green (2013-09-20). <a rel="nofollow" class="external text" href="http://blog.cryptographyengineering.com/2013/09/rsa-warns-developers-against-its-own.html">"RSA warns developers not to use RSA products"</a>.</cite>

</li>

<li id="cite_note-RSApaid-13"><a href="#cite_ref-RSApaid_13-0">^</a> <cite id="CITEREFMenn,_Joseph2013" class="citation news cs1">Menn, Joseph (December 20, 2013). <a rel="nofollow" class="external text" href="https://www.reuters.com/article/us-usa-security-rsa-idUSBRE9BJ1C220131220">"Exclusive: Secret contract tied NSA and security industry pioneer"</a>. Reuters. San Francisco. <a rel="nofollow" class="external text" href="https://web.archive.org/web/20150924191918/http://www.reuters.com/article/2013/12/20/us-usa-security-rsa-idUSBRE9BJ1C220131220">Archived</a> from the original on September 24, 2015. Retrieved December 20, 2013.</cite>

</li>

<li id="cite_note-14"><a href="#cite_ref-14">^</a> <cite id="CITEREFReuters_in_San_Francisco2013" class="citation news cs1">Reuters in San Francisco (2013-12-20). <a rel="nofollow" class="external text" href="https://www.theguardian.com/world/2013/dec/20/nsa-internet-security-rsa-secret-10m-encryption">"$10m NSA contract with security firm RSA led to encryption 'back door' | World news"</a>. theguardian.com. Retrieved 2014-01-23.</cite> <code class="cs1-code">{{cite news}}</code>: <code class="cs1-code">|author=</code> has generic name (help)

</li>

<li id="cite_note-15"><a href="#cite_ref-15">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://www.theregister.co.uk/2013/09/06/nsa_cryptobreaking_bullrun_analysis/">"That earth-shattering NSA crypto-cracking: Have spooks smashed RC4?"</a>. The Register. 2013-09-06. Retrieved 16 April 2015.</cite>

</li>

<li id="cite_note-16"><a href="#cite_ref-16">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="http://www.pcworld.com/article/2064960/google-strengthens-its-ssl-configuration-against-possible-attacks.html">"Google strengthens its SSL configuration against possible attacks"</a>. 2013-11-19. Retrieved 16 April 2015.</cite>

</li>

<li id="cite_note-17"><a href="#cite_ref-17">^</a> <cite id="CITEREFGoodin2013" class="citation web cs1">Goodin, Dan (2013-12-10). <a rel="nofollow" class="external text" href="https://arstechnica.com/security/2013/12/we-cannot-trust-intel-and-vias-chip-based-crypto-freebsd-developers-say/">""We cannot trust" Intel and Via's chip-based crypto, FreeBSD developers say"</a>. <a href="Ars_Technica" title="Ars Technica">Ars Technica</a>. Retrieved 2014-01-23.</cite>

</li>

<li id="cite_note-18"><a href="#cite_ref-18">^</a> <cite id="CITEREFSecurity_News2013" class="citation web cs1">Security News (2013-09-10). <a rel="nofollow" class="external text" href="https://www.theregister.co.uk/2013/09/10/torvalds_on_rrrand_nsa_gchq/">"Torvalds shoots down call to yank 'backdoored' Intel RdRand in Linux crypto"</a>. <a href="The_Register" title="The Register">The Register</a>.</cite>

</li>

<li id="cite_note-19"><a href="#cite_ref-19">^</a> <cite id="CITEREFTim_Bray,_Google_Identity_Team2013" class="citation web cs1">Tim Bray, Google Identity Team (July 2013). <a rel="nofollow" class="external text" href="http://googledevelopers.blogspot.com/2013/07/google-certificates-upgrade-in-progress.html">"Google certificates upgrade in progress"</a>. Google Developer Blog.</cite> <code class="cs1-code">{{cite web}}</code>: <code class="cs1-code">|author=</code> has generic name (help)

</li>

<li id="cite_note-20"><a href="#cite_ref-20">^</a> <cite id="CITEREFSchneier2013" class="citation news cs1">Schneier, Bruce (5 September 2013). <a rel="nofollow" class="external text" href="https://www.theguardian.com/commentisfree/2013/sep/05/government-betrayed-internet-nsa-spying">"The US government has betrayed the internet. We need to take it back"</a>. <a href="The_Guardian" title="The Guardian">The Guardian</a>. Retrieved 9 January 2017.</cite>

</li>

<li id="cite_note-21"><a href="#cite_ref-21">^</a> <cite id="CITEREFJohn_Gilmore2013" class="citation web cs1">John Gilmore (6 Sep 2013). <a rel="nofollow" class="external text" href="http://www.mail-archive.com/cryptography@metzdowd.com/msg12325.html">"Opening Discussion: Speculation on 'BULLRUN'"</a>. The Mail Archive. The Cryptography Mailing List. <q>the big companies involved ... are all in bed with NSA to make damn sure that working end-to-end encryption never becomes the default on mobile phones</q></cite>

</li>

<li id="cite_note-22"><a href="#cite_ref-22">^</a> <cite id="CITEREFMichael_Riley2014" class="citation news cs1">Michael Riley (2014-04-11). <a rel="nofollow" class="external text" href="https://www.bloomberg.com/news/articles/2014-04-11/nsa-said-to-have-used-heartbleed-bug-exposing-consumers">"NSA Said to Have Used Heartbleed Bug, Exposing Consumers"</a>. Bloomberg.com. <a href="Bloomberg_L.P." title="Bloomberg L.P.">Bloomberg</a>.</cite>

</li>

<li id="cite_note-BBC-23"><a href="#cite_ref-BBC_23-0">^</a> <cite id="CITEREFWard2013" class="citation news cs1">Ward, Mark (6 September 2013). <a rel="nofollow" class="external text" href="https://www.bbc.co.uk/news/world-us-canada-23981291">"Snowden leaks: US and UK 'crack online encryption'"</a>. BBC News. Retrieved 6 September 2013.</cite>

</li>

</ol></div>

<div class="mw-heading mw-heading2"><h2 id="External_links">External links</h2></div>

<ul><li><a rel="nofollow" class="external text" href="https://www.eff.org/deeplinks/2013/09/crucial-unanswered-questions-about-nsa-bullrun-program">Crucial Unanswered Questions about the NSA's BULLRUN Program</a></li>

<li><a rel="nofollow" class="external text" href="https://www.nytimes.com/interactive/2013/09/05/us/documents-reveal-nsa-campaign-against-encryption.html?_r=0">Documents Reveal N.S.A. Campaign Against Encryption</a></li>

<li><a rel="nofollow" class="external text" href="https://www.schneier.com/blog/archives/2013/10/defending_again_1.html">Defending Against Crypto Backdoors - Schneier on Security</a></li>

<li><a rel="nofollow" class="external text" href="http://www.mail-archive.com/cryptography@metzdowd.com/msg12325.html">Cryptography Opening Discussion: Speculation on "BULLRUN"</a> <a href="John_Gilmore_(activist)" title="John Gilmore (activist)">John Gilmore</a></li>

<li><a rel="nofollow" class="external free" href="https://www.cs.auckland.ac.nz/~pgut001/pubs/crypto_wont_help.pdf">https://www.cs.auckland.ac.nz/~pgut001/pubs/crypto_wont_help.pdf</a></li></ul></div><div><div class="zim-footer">

This article is issued from <a class="external text" title="Last edited on 2024-10-01" href="https://en.wikipedia.org/wiki/?title=Bullrun_(decryption_program)&oldid=1248811225">Wikipedia</a>. The text is available under <a class="external text" href="https://creativecommons.org/licenses/by-sa/4.0/deed.en">Creative Commons Attribution-Share Alike 4.0</a> unless otherwise noted. Additional terms may apply for the media files.

</div>

</div></div>

</div>

</main>

</div>

</body></html>