SIM Card Manufacturer Says Its Encryption Keys Are Safe From NSA Hacking

Facts matter: Sign up for the free Mother Jones Daily newsletter. Support our nonprofit reporting. Subscribe to our print magazine.


I’m passing this along without comment since I don’t have anything substantive to add. I just wanted to keep everyone up to date on the Intercept story about the NSA stealing cell phone encryption data stored on SIM chips:

Security-chip maker Gemalto NV said Wednesday that American and British intelligence services could be responsible for a “particularly sophisticated intrusion” of its networks several years ago, but denied that the alleged hack could have widely compromised encryption it builds into chips used in billions of cellphones world-wide.

….Company executives also asserted that the interceptions wouldn’t have compromised the security of its newer SIM cards for 3G and 4G cellular networks, only older 2G networks. The reason: Gemalto says the new technology no longer require it to send telecom companies the keys to decrypt individuals’ communications—so they couldn’t have been intercepted.

Hmmm. On the one hand, many of the Snowden documents are indeed fairly old, dating back to 2010 or 2011. So they could be out of date. On the other hand, the NSA didn’t necessarily have to “intercept” anything here. A sufficiently sophisticated hack could presumably have given them direct access to the Gemalto database that contains the encryption keys. And needless to say, Gemalto has a vested interest in assuring everyone that their current products are safe.

So….who knows what really happened here. We’ll likely hear more about it as Gemalto’s internal investigation continues.

WE'RE TAKING A SHORT BREAK…

from the big banner at the top of our pages asking for the donations that make Mother Jones' nonprofit journalism possible. But we still have upwards of $300,000 to raise by June 30, whether we get there is going to come down to the wire, and we can't afford to come up short.

If you value the reporting you get from Mother Jones and you can right now, please join your fellow readers who pitch in from time to time to keep our democracy-advancing, justice-seeking journalism charging hard (and to help us avoid a real budget crunch as June 30 approaches and our fiscal year ends).

payment methods

WE'RE TAKING A SHORT BREAK…

from the big banner at the top of our pages asking for the donations that make Mother Jones' nonprofit journalism possible. But we still have upwards of $300,000 to raise by June 30, whether we get there is going to come down to the wire, and we can't afford to come up short.

If you value the reporting you get from Mother Jones and you can right now, please join your fellow readers who pitch in from time to time to keep our democracy-advancing, justice-seeking journalism charging hard (and to help us avoid a real budget crunch as June 30 approaches and our fiscal year ends).

payment methods

We Recommend

Latest

Sign up for our free newsletter

Subscribe to the Mother Jones Daily to have our top stories delivered directly to your inbox.

Get our award-winning magazine

Save big on a full year of investigations, ideas, and insights.

Subscribe

Support our journalism

Help Mother Jones' reporters dig deep with a tax-deductible donation.

Donate