NSA “Declassified” Publicly Available Text on Cryptology
Updated below
Last month the National Security Agency announced the declassification of various historic records as evidence of its “commitment to meeting the requirements” of President Obama’s policy on openness and transparency. Among the newly declassified records was a 200 year old publication on cryptology. (“NSA Declassifies 200 Year Old Report,” Secrecy News, June 9, 2011.)
NSA listed the 1809 study as a “highlight” of the new releases in a press statement, and the National Archives featured it in a promotional blog posting. But upon inspection, it turns out that the newly released document was already in the public domain and freely available online.
Instead of providing cause for celebration or congratulation, the NSA “release” is a disturbing sign of futility and irrelevance in the nation’s declassification program.
The June 8 NSA press statement hailed the disclosure of “early publications on cryptography, including ‘Cryptology: Instruction Book on the Art of Secret Writing’ from 1809. In fact, the document is a German work and its real title is “Kryptographik: Lehrbuch der Geheimschreibekunst…” by Johann Ludwig Klüber (1762-1837), who was the first Professor of Law at the University of Heidelberg.
According to a June 14 blog post by James Rush of the National Archives, this work was among the German government records that were seized by U.S. forces after the defeat of Germany in World War II, and it found its way into U.S. intelligence files.
Though the NSA press statement seemed to indicate that the full publication was being disclosed, the material that was released by NSA was actually just a 40 page abstract and excerpt of the author’s much longer work. A copy of what was transferred to the National Archives is now posted here (pdf).
The cover sheet indicates that the document was classified as Secret, and that it was formally declassified on November 12, 2010 by D. Janosek, NSA Deputy Associate Director for Policy and Records, along with a second reviewer who was identified only by his or her initials.
But what neither the National Security Agency nor the National Archives seemed to realize is that not only had the source material never been classified — and so could not properly be “declassified” — but that it was already publicly available. The full 532 page text of the 1809 study — not just a 40 page abstract — was actually digitized several years ago and published online through Google Books.
Two obvious inferences may be drawn from this episode. First, there is extravagant overclassification at the National Security Agency, as in many other corners of government. This means that access restrictions are being imposed on records that do not require or deserve such protection. Second, there is a lack of effective oversight mechanisms to promptly identify and correct such instances of overclassification. There are always going to be classification errors, so there need to be robust error correction mechanisms. Ideally, Google Books would not be one of them.
Update: On August 19, 2011 the NSA issued a supplementary press release (pdf) that added some significant clarifications and contextual information regarding the declassified document. In particular, the NSA noted that the newly released document included a hand-written cryptography example that did not appear in the Klüber book.
With 2000 nuclear weapons on alert, far more powerful than the first bomb tested in the Jornada Del Muerto during the Trinity Test 80 years ago, our world has been fundamentally altered.
As the United States continues nuclear modernization on all legs of its nuclear triad through the creation of new variants of warheads, missiles, and delivery platforms, examining the effects of nuclear weapons production on the public is ever more pressing.
“The first rule of government transformation is: there are a lot of rules. And there should be-ish. But we don’t need to wait for permission to rewrite them. Let’s go fix and build some things and show how it’s done.”
To better understand what might drive the way we live, learn, and work in 2050, we’re asking the community to share their expertise and thoughts about how key factors like research and development infrastructure and automation will shape the trajectory of the ecosystem.