Columns

Canada Complicit in Undermining Internet Privacy

As the tidal wave of disclosures on widespread U.S. surveillance continues – there is now little doubt that the U.S. government has spent billions creating a surveillance infrastructure that covers virtually all Internet and wireless communications – the question of Canada’s role in these initiatives remains largely shrouded in secrecy.

The Canadian government has said little, but numerous reports suggest that agencies such as the Communications Security Establishment Canada (the CSE is the Canadian counterpart to the U.S. National Security Agency) are engaged in similar kinds of surveillance. This includes capturing metadata of Internet and wireless communications and working actively with foreign intelligence agencies to swap information obtained through the data mining of Internet-based surveillance.

My weekly technology law column (Toronto Star version, homepage version) notes the active connection between Canadian and U.S. officials moved to the forefront last week with reports that Canadian officials may have played a starring role in facilitating U.S. efforts to create a “backdoor” to widely used encryption standards. That initiative has been described as “undermining the very fabric of the Internet.”

Encryption standards play a crucial role in Internet security by allowing parties to communicate in a secure manner over open networks. The technologies are used for electronic banking, medical records, e-commerce transactions, and online communications.

Earlier this month, new reports indicated that the NSA had secretly managed to defeat Internet privacy and security by cracking widely used encryption technologies. The revelations sent shock waves throughout the Internet security community and raised doubts about the security of millions of transactions that take place online.

While the NSA reportedly uses several techniques to break encryption, including deploying super-computers and working with technology companies to weaken the security embedded within their products, the most important factor may have been the creation of several international encryption standards that made it easier for the agency to crack encrypted messages.

As reported by the New York Times, the encryption standards involve the use of mathematical algorithms to generate random numbers. Those randomly generated numbers play an important role in creating encrypted messages by making it virtually impossible to crack the code. Yet behind-the-scenes, it turns out the NSA wrote the standard, granting itself the capability to break the resulting encryption.

The Canadian role in these developments is linked to how the NSA managed to gain control over the standard setting process. In 2006, the CSE ran the global standard setting process for the International Organization for Standardization. The NSA convinced the CSE to allow it to re-write an earlier draft and ultimately become the sole editor of the standard.

The CSE claims that its relationship with the NSA during the standard setting process was merely designed to support the Canadian government’s effort to secure its technological infrastructure. However, it is now clear that Canada worked with the U.S. to ensure that the backdoor was inserted into the encryption standard and that it may have gained access to decryption information in the process.

In fact, Canada’s work with the U.S. on surveillance issues has even included financial compensation. Bill Robinson, who actively tracks CSE activities, recently reported “that a specific account exists within the government’s Financial Reporting Accounts to record payments that CSE receives from foreign governments.” Government documents indicate that the account “is used by Communications Security Establishment to record funds received from foreign governments, to cover expenditures to be made on their behalf, in accordance with the provisions of agreements with the Government of Canada.”

In other words, Canada may not only have played a key role in facilitating one of the most significant incursions into the Internet privacy, but it may even have been paid for its work.

8 Comments

  1. And we thought Canada was bending over a little too far when it came to the USA’s copyright demands…? Seems like we may have fractured a few vertebrae on this latest stunt.

    The USA seems to think being exceptional is being ‘exempt-from-all’ conventions of respect. The worst part in my books is the hypocrisy of being the beacon of rights and freedom while having trysts through the back door.

  2. FOI Request
    If you really want to know, just file a FOI on it. I’m sure that Harper’s Most Transparent Government Ever(tm) would be happy to shed light on the situation.

  3. Birbal Online says:

    Free Online Classified
    Great site of

  4. @Crockett
    “The USA seems to think being exceptional is being ‘exempt-from-all’ conventions of respect. The worst part in my books is the hypocrisy of being the beacon of rights and freedom while having trysts through the back door.”

    Could not agree more! Even a private U.S. company (Google) has decided their not accountable to any other Countries laws.
    The arrogance.

  5. James Van Leeuwen says:

    Privacy or security
    Is it possible that a majority of today’s Canadians would surrender personal privacy and freedom in the name of greater security?

    Is it possible that a majority would actually endorse our Government’s actions?

    I don’t want to believe it’s possible, but we aren’t the nation we used to be.

    If this is the future that a majority of Canadians want for themselves and their children, I no longer stand on guard for Canada.

    Time to ask some hard questions of ourselves.

  6. want to know
    ProWeb365 is a results & relationship-driven company. We only bill you for results that we successfully deliver. Our Minneapolis web design firm provides the most reliable and professional web services, and strives to go above and beyond your expectations. We can help place your business website on the most important real estate on the Internet: Google’s page-one. Contact our Minneapolis internet marketing company at 612-590-8080 and let us prepare your website for Online marketing success.

  7. Privacy or security
    James Van Leeuwen you are absolutely correct. We seem to be becoming as mind numbed and unaware/uncaring as many of the people living below the 49th and it is scary and frustrating. We are not the nation we used to be…there are far too many who buy into the “if you’re not doing anything wrong, you have nothing to worry about” creed.

  8. Internet Marketing Services says:

    laurimar estate doreen
    Marketing is the need of today’s generation, everyone wants to be online, build online reputation, wants to be famous and get known by others. Internet has advanced with generations and people know there are many tools which can help them get what they want.