Crypto AG

Crypto AG was a Swiss company specialising in communications and information security. It was secretly jointly owned by the American (CIA) and West German  (BND) from 1970 until about 1993, with the CIA continuing as sole owner until about 2018. With headquarters in, the company was a long-established manufacturer of machines and a wide variety of cipher devices.

The company had about 230 employees, had offices in, , , , , and Steinhausen, and did business throughout the world. The owners of Crypto AG were unknown, supposedly even to the managers of the firm, and they held their ownership through.

The company has been criticised for selling products to benefit the American, British and German national signals intelligence agencies, the  (NSA), the  (GCHQ), and the BND, respectively. On 11 February 2020, , and  revealed that Crypto AG was secretly owned by the CIA in a highly classified partnership with West German intelligence, and the spy agencies could easily break the codes used to send encrypted messages. The operation was known first by the code name "Thesaurus" and later "Rubicon".

History
Crypto AG was established in Switzerland by the Russian-born,. Originally called AB Cryptoteknik and founded by in  in 1920, the firm manufactured the  that Damm had patented. After Damm's death, and just before the, Cryptoteknik came under the control of Hagelin, an early investor.

Hagelin's hope was to sell the device to the American army. When Germany invaded Norway in 1940, he moved from Sweden to the US and presented the device to the military, which in turn brought the device to the, and the code-breakers in. In the end he was awarded a licensing agreement and 140,000 units where made during the war for American troops.

During the time in America, Hagelin became close friends with who in 1952 became chief cryptologist for the  (NSA) and who Hagelin had known since the 1930s. Hagelin lawyer, Stuart Hedden, became the same year deputy commander in, Inspector General.

In 1948 Hagelin moved to in Switzerland to avoid taxes. In 1952 the company, which until then had been incorporated in Stockholm, moved along. The official reason was that it was transferred as a result of a planned Swedish government nationalization of militarily important technology contractors. A holding company was set up in Liechtenstein.

During the 1950s, Hagelin and Friedman had frequent mail correspondence, both personal and business alike. Crypto AG sent over new machines to the NSA and they had an ongoing discussion of which countries they would or would not sell the encryption systems to, and which countries to sell older weaker systems. In the beginning it was an informal agreement between the two friends, but after Friedman got three heart attacks in 1955, the cooperation was confirmed from "supreme hold". In 1958 when Friedman retiered,, a high-ranking NSA employee, and Lawrence E. Shinn, NSA's signal intelligence directory in Asia, took over the correspondence.

During the 1960s, Crypto AG began to cooperation with other European communication companies like, and.

In June 1970, the company was bought in secret by the CIA and the West-Germany intelligence service,, for $5.75 million. Hagelin had first been approach to sell to partnership between the French and West-German intelligence service in 1967, but Hagelin contacted CIA and the Americans did not cooperate with the French. At this point the company had 400 employees and the revenue increased from 100,000 in the 1950s to 14 million Swiss franc in the 1970s.

In 1994, Crypto AG bought InfoGuard AG, a company providing encryption solutions to banks.

In 2018, Crypto AG was liquidated, and its assets and intellectual property sold to two new companies. CyOne was created for Swiss domestic sales, while Crypto International AG was founded in 2018 by Swedish entrepreneur Andreas Linde, who acquired the brand name, international distribution network, and product rights from the original Crypto AG.

Products
The company had radio, Ethernet, STM, GSM, phone and fax encryption systems in its portfolio.

Machines:

Compromised machines
According to declassified (but partly redacted) US government documents released in 2015, in 1955, Crypto AG's founder Boris Hagelin and William Friedman entered into an unwritten agreement concerning the C-52 encryption machines that compromised the security of some of the purchasers. Friedman was a notable US government cryptographer who was then working for the (NSA), the main United States  agency. Hagelin kept both NSA and its United Kingdom counterpart, (GCHQ), informed about the technical specifications of different machines and which countries were buying which ones. Providing such information would have allowed the intelligence agencies to reduce the time needed to crack the encryption of messages produced by such machines from impossibly long to a feasible length. The secret relationship initiated by the agreement also involved Crypto AG not selling machines such as the CX-52, a more advanced version of the C-52, to certain countries; and the NSA writing the operations manuals for some of the CX-52 machines on behalf of the company, to ensure the full strength of the machines would not be used, thus again reducing the necessary cracking effort.

Crypto AG had already earlier been accused of rigging its machines in collusion with intelligence agencies such as NSA, GCHQ, and the German (BND), enabling the agencies to read the encrypted traffic produced by the machines. Suspicions of this collusion were aroused in 1986 following US president 's announcement on national television that, through interception of diplomatic communications between and the Libyan embassy in, he had irrefutable evidence that  of Libya was behind the  in 1986. President Reagan then ordered of Tripoli and  in retaliation. There is no conclusive evidence that there was an intercepted Libyan message.

Further evidence suggesting that the Crypto AG machines were compromised was revealed after the assassination of former Iranian Prime Minister in 1991. On 7 August 1991, one day before Bakhtiar's body was discovered, the Iranian Intelligence Service transmitted a coded message to Iranian embassies, inquiring "Is Bakhtiar dead?" Western governments were able to decipher this transmission, causing Iranian suspicion to fall upon their Crypto AG equipment.

The Iranian government then arrested Crypto AG's top salesman, Hans Buehler, in March 1992 in. It accused Buehler of leaking their encryption codes to Western intelligence. Buehler was interrogated for nine months but, being completely unaware of any flaw in the machines, was released in January 1993 after Crypto AG posted bail of $1m to Iran. Soon after Buehler's release Crypto AG dismissed him and charged him the $1m. Swiss media and the German magazine  took up his case in 1994, interviewing former employees and concluding that Crypto's machines had in fact repeatedly been rigged.

Crypto AG rejected these accusations as "pure invention", asserting in a press release that "in March 1994, the Swiss Federal Prosecutor's Office initiated a wide-ranging preliminary investigation against Crypto AG, which was completed in 1997. The accusations regarding influence by third parties or manipulations, which had been repeatedly raised in the media, proved to be without foundation." Subsequent commentators were unmoved by this denial, stating that it was likely that Crypto AG products were indeed rigged.  has argued that Crypto AG had been actively working with the British, US and West German secret services since 1956, going as far as to rig manuals after the wishes of the NSA. These claims were vindicated by US government documents declassified in 2015.

In 2020, an investigation carried out by , (ZDF), and  (SRF) revealed that Crypto AG was, in fact, entirely controlled by the CIA and the BND. The project, initially known by codename "Thesaurus" and later as "Rubicon" operated from the end of the Second World War until 2018.