Text: Small Text  Normal Text  Large Text  Larger Text
  • Columns
  • Canada Complicit in Undermining Internet Privacy

Blog Archive

PrevPrevApril 2014NextNext
SMTWTFS
  12345
6789101112
13141516171819
20212223242526
27282930

Canada Complicit in Undermining Internet Privacy

PDF  | Print |  E-mail
Tuesday September 17, 2013
As the tidal wave of disclosures on widespread U.S. surveillance continues - there is now little doubt that the U.S. government has spent billions creating a surveillance infrastructure that covers virtually all Internet and wireless communications - the question of Canada’s role in these initiatives remains largely shrouded in secrecy.

The Canadian government has said little, but numerous reports suggest that agencies such as the Communications Security Establishment Canada (the CSE is the Canadian counterpart to the U.S. National Security Agency) are engaged in similar kinds of surveillance. This includes capturing metadata of Internet and wireless communications and working actively with foreign intelligence agencies to swap information obtained through the data mining of Internet-based surveillance.

My weekly technology law column (Toronto Star version, homepage version) notes the active connection between Canadian and U.S. officials moved to the forefront last week with reports that Canadian officials may have played a starring role in facilitating U.S. efforts to create a "backdoor" to widely used encryption standards. That initiative has been described as "undermining the very fabric of the Internet."

Encryption standards play a crucial role in Internet security by allowing parties to communicate in a secure manner over open networks. The technologies are used for electronic banking, medical records, e-commerce transactions, and online communications.

Earlier this month, new reports indicated that the NSA had secretly managed to defeat Internet privacy and security by cracking widely used encryption technologies. The revelations sent shock waves throughout the Internet security community and raised doubts about the security of millions of transactions that take place online.

While the NSA reportedly uses several techniques to break encryption, including deploying super-computers and working with technology companies to weaken the security embedded within their products, the most important factor may have been the creation of several international encryption standards that made it easier for the agency to crack encrypted messages.

As reported by the New York Times, the encryption standards involve the use of mathematical algorithms to generate random numbers. Those randomly generated numbers play an important role in creating encrypted messages by making it virtually impossible to crack the code. Yet behind-the-scenes, it turns out the NSA wrote the standard, granting itself the capability to break the resulting encryption.

The Canadian role in these developments is linked to how the NSA managed to gain control over the standard setting process. In 2006, the CSE ran the global standard setting process for the International Organization for Standardization. The NSA convinced the CSE to allow it to re-write an earlier draft and ultimately become the sole editor of the standard.

The CSE claims that its relationship with the NSA during the standard setting process was merely designed to support the Canadian government’s effort to secure its technological infrastructure. However, it is now clear that Canada worked with the U.S. to ensure that the backdoor was inserted into the encryption standard and that it may have gained access to decryption information in the process.

In fact, Canada’s work with the U.S. on surveillance issues has even included financial compensation. Bill Robinson, who actively tracks CSE activities, recently reported "that a specific account exists within the government's Financial Reporting Accounts to record payments that CSE receives from foreign governments." Government documents indicate that the account "is used by Communications Security Establishment to record funds received from foreign governments, to cover expenditures to be made on their behalf, in accordance with the provisions of agreements with the Government of Canada."

In other words, Canada may not only have played a key role in facilitating one of the most significant incursions into the Internet privacy, but it may even have been paid for its work.
Comments (8)add comment

Crockett said:

...
And we thought Canada was bending over a little too far when it came to the USA's copyright demands...? Seems like we may have fractured a few vertebrae on this latest stunt.

The USA seems to think being exceptional is being 'exempt-from-all' conventions of respect. The worst part in my books is the hypocrisy of being the beacon of rights and freedom while having trysts through the back door.

September 17, 2013

BillM said:

FOI Request
If you really want to know, just file a FOI on it. I'm sure that Harper's Most Transparent Government Ever(tm) would be happy to shed light on the situation.
September 17, 2013

Birbal Online said:

Free Online Classified
Great site of
September 18, 2013

Dan said:

@Crockett
"The USA seems to think being exceptional is being 'exempt-from-all' conventions of respect. The worst part in my books is the hypocrisy of being the beacon of rights and freedom while having trysts through the back door."

Could not agree more! Even a private U.S. company (Google) has decided their not accountable to any other Countries laws.
The arrogance.
September 18, 2013

James Van Leeuwen said:

Privacy or security
Is it possible that a majority of today's Canadians would surrender personal privacy and freedom in the name of greater security?

Is it possible that a majority would actually endorse our Government's actions?

I don't want to believe it's possible, but we aren't the nation we used to be.

If this is the future that a majority of Canadians want for themselves and their children, I no longer stand on guard for Canada.

Time to ask some hard questions of ourselves.

September 18, 2013

Alice said:

want to know
ProWeb365 is a results & relationship-driven company. We only bill you for results that we successfully deliver. Our Minneapolis web design firm provides the most reliable and professional web services, and strives to go above and beyond your expectations. We can help place your business website on the most important real estate on the Internet: Google’s page-one. Contact our Minneapolis internet marketing company at 612-590-8080 and let us prepare your website for Online marketing success.
September 23, 2013

Jean said:

Privacy or security
James Van Leeuwen you are absolutely correct. We seem to be becoming as mind numbed and unaware/uncaring as many of the people living below the 49th and it is scary and frustrating. We are not the nation we used to be...there are far too many who buy into the "if you're not doing anything wrong, you have nothing to worry about" creed.
October 02, 2013

Internet Marketing Services said:

laurimar estate doreen
Marketing is the need of today’s generation, everyone wants to be online, build online reputation, wants to be famous and get known by others. Internet has advanced with generations and people know there are many tools which can help them get what they want.
November 19, 2013

Write comment
smaller | bigger

busy
Tags:
, , , ,
Share: Slashdot, Digg, Del.icio.us, Newsfeeder, Reddit, StumbleUpon, TwitterEmailPrintPDF
Related Items: