Coviello: RSA Securitys Work With NSA A Matter Of Public Record

RSA chairman calls for global intelligence community reforms, spinning IAD off from NSA

RSA CONFERENCE 2014 -- San Francisco -- RSA Security executive chairman Art Coviello in his keynote address here today addressed publicly for the first time the security companys relationship with the National Security Agency (NSA), which he said mainly has entailed working with NSAs Information Assurance Directorate (IAD), the cyberdefense arm of the agency.
Coviello stopped short of specifically addressing details of the December
Reuters report
that the NSA in 2006 had paid RSA $10 million in a secret contract to use the Dual EC DRBG random-number generator algorithm in its Bsafe software in order to facilitate the NSAs spying programs. The encryption algorithm reportedly was one that the NSA was able to crack.
Weve been doing business with the NSA for a long time. Its a matter of public record, Coviello said in an interview with Dark Reading after his keynote. We have worked with the IAD on the defense side of the house. My purpose in the speech was to really get us past the NSA issue and the raise the level of the dialogue.
In a Dec. 22
blog post
responsing to allegations of an NSA secret contract, RSA dismissed reports that it had a secret pact with the NSA, stating that we have never entered into any contract or engaged in any project with the intention of weakening RSAs products, or introducing potential backdoors into our products for anyones use.
Coviello in his keynote today said RSA supports NISTs
new proposal for creating encryption standards
, as well as the recommendation by the Presidents Review Group on Intelligence and Communications Technologies that calls for spinning off the NSAs IAD. The goal of removing IAD from the spy agency is to narrow the NSAs role as a foreign intelligence agency.
Sadly, much of the great work of the IAD is getting lost in the feeding frenzy around this controversy, Coviello said in his speech. Its not only sad, its dangerous for the country. However its done, creating greater separation between the offensive and defensive roles of the NSA would go far to repair relations and to rebuild trust.
The RSA executive also called for several reforms to the international intelligence community. All intelligence agencies around the world need to adopt a governance model that enables them to do more to defend us and less to offend us, he said.
Coviello called for some societal norms for the digital world: the rejection of the use of cyberweapons and for using the Internet for war; international cooperation in the investigation, arrest, and prosecution of cybercriminals; the protection of commerce and intellectual property on the Net; and the preservation of privacy of individuals.
Its not just NSA. All of the intelligence agencies have to come to grips that these digital norms dont exist and they need to be created, he told Dark Reading.
He says the NSA missed the opportunity to provide transparency of its operations. If they need to encroach on privacy in some form or fashion, it needs to be strictly governed, and so people feel comfortable about that process, it needs to be transparent so people can get visibility into how that governance model is actually being acted upon, he said in the interview. The NSA missed the opportunity to give people that transparency. A lot in the press about the NSA is just not accurate.
Coviellos keynote kicked off an RSA Conference abuzz with
isolated speaker boycotts
of the event due to the RSA-NSA allegations and an alternative conference, called TrustyCon, planned for Thursday next door to the convention center housing the RSA Conference. Many of the speakers and discussions have centered around the debate over the scope of the NSAs surveillance programs in the wake of NSA documents leaked by former NSA contractor Edward Snowden.
In September, NIST recommended that software developers refrain from using the Dual EC DRBG algorithm in the wake of the Snowden leaks, and RSA immediately ... took steps to remove the algorithm from use, Coviello said in his keynote.
Marc Maiffret, CTO of BeyondTrust, says most security firms have worked with NSAs IAD in security standards efforts, for example, and he doesnt think there was any conspiracy associated with the NSAs involvement in security standards work.
Have a comment on this story? Please click Add Your Comment below. If youd like to contact
Dark Readings
editors directly,
send us a message
.

Last News
▸ Nigerian scammers now turning into mediocre malware pushers. ◂ Discovered: 23/12/2024 Category: security	▸ Beware EMV may not fully protect against skilled thieves. ◂ Discovered: 23/12/2024 Category: security	▸ Hack Your Hotel Room ◂ Discovered: 23/12/2024 Category: security

**Cyber Security Categories**
Google Dorks Database	Exploits Vulnerability	Exploit Shellcodes

CVE List

Tools/Apps

News/Aarticles

Phishing Database

Deepfake Detection

Trends/Statistics & Live Infos

Tags:
Coviello: RSA Securitys Work With NSA A Matter Of Public Record