View source for Company:RSA Security

{{Short description|American computer security company}}

{{Infobox company
| name = RSA Security LLC
| trade_name = RSA
| logo = RSA Security logo2.svg
| logo_size = 150px
| type = [[Finance:Independent business|Independent]]
| founder = {{unbulleted list
 | [[Biography:Ron Rivest|Ron Rivest]]
 | [[Biography:Adi Shamir|Adi Shamir]]
 | [[Biography:Leonard Adleman|Leonard Adleman]]}}<ref name="RC5Challenge"/>
| key_people = {{unbulleted list
 | Rohit Ghai (2017-present)<ref>{{cite web
  | url        = https://www.rsa.com/en-us/company/news/rohit-ghai-named-president-of-rsa
  | title        = Rohit Ghai Named President at RSA
  | access-date        = January 9, 2017
  | archive-date        = September 24, 2020
  | archive-url        = https://web.archive.org/web/20200924022149/https://www.rsa.com/en-us/company/news/rohit-ghai-named-president-of-rsa
  | url-status        = dead
  }}</ref>
 | Amit Yoran (2014-2016)<ref>{{cite web
  | url        = http://www.securityweek.com/amit-yoran-named-president-rsa
  | title      = Amit Yoran Named President at RSA
  | date = October 29, 2014
 | access-date = December 29, 2014}}</ref>}}
| industry = Network Security and Authentication
| products = RSA Access Manager, RSA Adaptive Authentication, RSA Adaptive Authentication for eCommerce, RSA Archer Suite, RSA Authentication Manager, RSA Cybercrime Intelligence, RSA Data Loss Prevention, RSA Digital Certificate Solutions, RSA Federated Identity Manager, RSA FraudAction Services, RSA Identity Governance and Lifecycle, RSA NetWitness Endpoint, RSA NetWitness Investigator, RSA NetWitness Orchestrator, RSA NetWitness Platform, RSA NetWitness UEBA, RSA SecurID Access, RSA Web Threat Detection
| num_employees = 2,700+
| foundation = {{start date and age|1982}}<ref name="RC5Challenge"/><ref name="kaliski"/>
| location_city = Chelmsford, Massachusetts
| location_country = United States
| parent = Symphony Technology Group
| homepage = {{url|www.rsa.com}}
}}

'''RSA Security LLC''',<ref>{{cite web| url=http://www.hoovers.com/company-information/cs/company-profile.RSA_Security_LLC.ef345dbdf6a59dd7.html| title=RSA Security LLC Company Profile| access-date=May 15, 2013}}</ref> formerly '''RSA Security, Inc.''' and [[Social:Trade name|trade name]] '''RSA''', is an American [[Computer security|computer]] and [[Network security|network security]] company with a focus on encryption and encryption standards. RSA was named after the initials of its co-founders, [[Biography:Ron Rivest|Ron Rivest]], [[Biography:Adi Shamir|Adi Shamir]] and [[Biography:Leonard Adleman|Leonard Adleman]], after whom the RSA public key cryptography [[Algorithm|algorithm]] was also named.<ref>{{cite web|url=http://www.rsa.com/node.aspx?id=2760|title=RSA History|access-date=June 8, 2011}}</ref> Among its products is the SecurID authentication token. The [[Software:BSAFE|BSAFE]] [[Cryptography|cryptography]] libraries were also initially owned by RSA. RSA is known for incorporating backdoors developed by the [[Organization:National Security Agency|NSA]] in its products.<ref name="NSAcollab1">{{cite news |url=https://www.reuters.com/article/us-usa-security-nsa-rsa-idUSBREA2U0TY20140331|title=NSA infiltrated RSA security more deeply than thought - study|date=March 31, 2014|access-date=2014-03-31|work=Reuters}}</ref><ref name="NSAcollab2">{{cite web |url=https://arstechnica.com/security/2014/03/report-rsa-endowed-crypto-product-with-second-nsa-influenced-code/|title=RSA endowed crypto product with second NSA-influenced code|date=March 31, 2014|access-date=2014-03-31|publisher=Ars Technica}}</ref> It also organizes the annual RSA Conference, an information security conference.

Founded as an independent company in 1982, RSA Security was acquired by EMC Corporation in 2006 for US$2.1 billion and operated as a division within EMC.<ref name="EMCpurchase"/> When EMC was acquired by [[Company:Dell Technologies|Dell Technologies]] in 2016,<ref>{{cite web|title=Dell Technologies - Who We Are|url=https://www.delltechnologies.com/en-us/who-we-are.htm#accordion0=0|publisher=Dell Technologies Inc.|access-date=9 September 2016}}</ref> RSA became part of the Dell Technologies family of brands. On 10 March 2020, Dell Technologies announced that they will be selling RSA Security to a consortium, led by Symphony Technology Group (STG), Ontario Teachers’ Pension Plan Board (Ontario Teachers’) and AlpInvest Partners (AlpInvest) for US$2.1 billion, the same price when it was bought by EMC back in 2006.<ref>{{Cite web|title=RSA® Emerges as Independent Company Following Completion of Acquisition by Symphony Technology Group|url=https://www.rsa.com/en-us/company/news/rsa--emerges-as-independent-company|access-date=2020-11-02|website=RSA.com|language=en}}</ref>

RSA is based in Chelmsford, Massachusetts, with regional headquarters in Bracknell (UK) and [[Place:Singapore|Singapore]], and numerous international offices.<ref>{{Cite web | url=http://www.emc.com/corporate/about-rsa/index.htm | title=About RSA &#124; Cybersecurity and Digital Risk Management}}</ref>

==History==
{{Prose|date=June 2023|section}}[[File:MBTA route 351 bus at RSA offices, May 2020.jpg|thumb|left|RSA headquarters in Chelmsford, Massachusetts|alt=A suburban office building]]
[[Biography:Ron Rivest|Ron Rivest]], [[Biography:Adi Shamir|Adi Shamir]] and [[Biography:Leonard Adleman|Leonard Adleman]], who developed the RSA encryption algorithm in 1977, founded RSA Data Security in 1982.<ref name="RC5Challenge">{{cite web|url=http://www.rsa.com/press_release.aspx?id=716|title=Distributed Team Cracks Hidden Message in RSA's 56-Bit RC5 Secret-Key Challenge|date=October 22, 1997|access-date=February 22, 2009|url-status=dead|archive-url=https://web.archive.org/web/20110929142639/http://www.rsa.com/press_release.aspx?id=716|archive-date=September 29, 2011|df=mdy-all}}</ref><ref name="kaliski">{{cite web|url=http://www.rsa.com/rsalabs/staff/bios/bkaliski/publications/other/kaliski-three-decades-smu-2006.ppt|title=Growing Up with Alice and Bob: Three Decades with the RSA Cryptosystem|last=Kaliski|first=Burt|date=October 22, 1997|archive-url=https://web.archive.org/web/20110929142653/http://www.rsa.com/rsalabs/staff/bios/bkaliski/publications/other/kaliski-three-decades-smu-2006.ppt|archive-date=September 29, 2011|url-status=dead|access-date=April 29, 2017|df=mdy-all}}</ref> The company acquired a "worldwide exclusive license" from the [[Organization:Massachusetts Institute of Technology|Massachusetts Institute of Technology]] to a patent on the RSA cryptosystem technology granted in 1983.<ref name="byte198507_rsa">{{ cite magazine | url=https://archive.org/details/BYTE_Vol_10-07_1985-07_Computers_and_Space/BYTE%20Vol%2010-07%201985-07%20Computers%20and%20Space/page/n17/mode/1up | title=Public-Key Patent | magazine=Byte | last1=Bennett | first1=Ralph | date=July 1985 | access-date=21 May 2023 | pages=16 }}</ref>
* In 1994, RSA was against the Clipper chip during the Crypto War.<ref>{{cite news|last1=Levy|first1=Stephen|title=Battle of the Clipper Chip|work=The New York Times |url=https://www.nytimes.com/1994/06/12/magazine/battle-of-the-clipper-chip.html?pagewanted=all|access-date=19 October 2017|date=12 June 1994}}</ref>
* In 1995, RSA sent a handful of people across the hall to found Digital Certificates International, better known as VeriSign.{{Citation needed|date=June 2023}}
* The company then called ''Security Dynamics'' acquired ''RSA Data Security'' in July 1996 and ''DynaSoft AB'' in 1997.
* In January 1997, it proposed the first of the DES Challenges which led to the first public breaking of a message based on the [[Engineering:Data Encryption Standard|Data Encryption Standard]].
* In February 2001, it acquired ''Xcert International, Inc.'', a privately held company that developed and delivered digital certificate-based products for securing e-business transactions.{{Citation needed|date=August 2020}}
* In June 2001, it acquired ''3-G International, Inc.'', a privately held company that developed and delivered smart card and [[Biometrics|biometric authentication]] products.<ref>{{cite web|url=https://www.newspapers.com/article/the-boston-globe/139378352/|archiveurl=https://web.archive.org/web/20240123095528/https://www.newspapers.com/article/the-boston-globe/139378352/|title=RSA Security buys Va. company|newspaper=The Boston Globe|page=47|archivedate=January 23, 2024|date=June 8, 2001|accessdate=January 23, 2024|via=Newspapers.com}}</ref>
* In August 2001, it acquired ''Securant Technologies, Inc.'', a privately held company that produced ClearTrust, an [[Identity management|identity management]] product.{{Citation needed|date=August 2020}}
* In December 2005, it acquired Cyota, a privately held [[Place:Israel|Israel]]i company specializing in online security and anti-fraud solutions for financial institutions.<ref>{{Cite web|url=https://www.jpost.com/Business-and-Innovation|title=Business & Innovation &#124; The Jerusalem Post|website=www.jpost.com}}</ref>
* In April 2006, it acquired ''PassMark Security''.{{Citation needed|date=June 2023}}
* On September 14, 2006, RSA stockholders approved the acquisition of the company by EMC Corporation for $2.1&nbsp;billion.<ref name="EMCpurchase">{{cite web |url=http://www.rsasecurity.com/press_release.asp?doc_id=6983 |title=EMC Announces Definitive Agreement to Acquire RSA Security, Further Advancing Information-Centric Security |publisher=Rsasecurity.com |date=2006-06-29 |access-date=2012-05-12 |url-status=dead |archive-url=https://web.archive.org/web/20061020225636/http://www.rsasecurity.com/press_release.asp?doc_id=6983 |archive-date=October 20, 2006 |df=mdy-all }}</ref><ref>{{cite web |url=http://www.emc.com/news/emc_releases/showRelease.jsp?id=4605&l=en&c=US |title=EMC Newsroom: EMC News and Press Releases |publisher=Emc.com |access-date=2012-05-12 |url-status=dead |archive-url=https://web.archive.org/web/20071210083853/http://www.emc.com/news/emc_releases/showRelease.jsp?id=4605&l=en&c=US |archive-date=December 10, 2007 |df=mdy-all }}</ref><ref>{{cite web |url=http://www.rsasecurity.com/press_release.asp?doc_id=7317&id=1034 |title=EMC Completes RSA Security Acquisition, Announces Acquisition of Network Intelligence |publisher=Rsasecurity.com |date=2006-09-18 |access-date=2012-05-12 |url-status=dead |archive-url=https://web.archive.org/web/20061209150703/http://www.rsasecurity.com/press_release.asp?doc_id=7317&id=1034 |archive-date=December 9, 2006 |df=mdy-all }}</ref>
* In 2007, RSA acquired Valyd Software, a Hyderabad-based {{wipe|India}}n company specializing in file and data security.{{Citation needed|date=June 2023}}
* In 2009, RSA launched the RSA Share Project.<ref>{{cite web |url=http://www.rsashare.com/ |title=RSA Share Project |access-date=4 January 2013 }}{{Dead link|date=August 2023 |bot=InternetArchiveBot |fix-attempted=yes }}</ref> As part of this project, some of the RSA BSAFE libraries were made available for free. To promote the launch, RSA ran a programming competition with a US$10,000 first prize.<ref>{{cite web| url=https://community.emc.com/docs/DOC-3297|title=Announcing the RSA Share Project Programming Contest|date=24 Mar 2009 |access-date=4 January 2013 }}</ref>
* In March 2011, RSA suffered a security breach and its most valuable secrets were leaked, compromising the security of all existing [[RSA SecurID]] tokens.<ref>{{cite magazine | url=https://www.wired.com/story/the-full-story-of-the-stunning-rsa-hack-can-finally-be-told/ | title=The Full Story of the Stunning RSA Hack Can Finally be Told | magazine=Wired | last1=Greenberg | first1=Andy }}</ref><ref>{{Cite web|url=https://archive.f-secure.com/weblog/archives/00002225.html|title = The file that hacked RSA: How we found it - F-Secure Weblog : News from the Lab}}</ref>
* In 2011, RSA introduced a new CyberCrime Intelligence Service designed to help organizations identify computers, information assets and identities compromised by trojans and other online attacks.<ref>{{cite web|url=http://www.emc.com/security/rsa-identity-protection-and-verification/rsa-cybercrime-intelligence-service.htm |title=RSA CyberCrime Intelligence Service |publisher=rsa.com |access-date=2013-12-19}}</ref>
* In July 2013, RSA acquired Aveksa the leader in Identity and Access Governance sector<ref>{{cite web |url=https://www.emc.com/about/news/press/2013/20130708-01.htm |title=EMC Acquires Aveksa Inc., Leading Provider of Business-Driven Identity and Access Management Solutions |publisher=EMC Corporation |date=2013-07-08 |url-status=live |archive-url=https://web.archive.org/web/20171027231813/https://www.emc.com/about/news/press/2013/20130708-01.htm |archive-date=2017-10-27 |access-date=2018-09-24 }}</ref>
* On September 7, 2016, RSA was acquired by and became a subsidiary of Dell EMC Infrastructure Solutions Group through the acquisition of EMC Corporation by [[Company:Dell Technologies|Dell Technologies]] in a cash and stock deal led by Michael Dell.{{Citation needed|date=June 2023}}
* On February 18, 2020, [[Company:Dell Technologies|Dell Technologies]] announced their intention to sell RSA for $2.075 billion to Symphony Technology Group.{{Citation needed|date=June 2023}}
* In anticipation of the sale of RSA to Symphony Technology Group, [[Company:Dell Technologies|Dell Technologies]] made the strategic decision to retain the [[Software:BSAFE|BSAFE]] product line. To that end, RSA transferred [[Software:BSAFE|BSAFE]] products (including the Data Protection Manager product) and customer agreements, including maintenance and support, to [[Company:Dell Technologies|Dell Technologies]] on July 1, 2020.<ref>{{Cite web|title=BSAFE support and billing update {{!}} Dell US|url=https://www.dell.com/support/article/en-us/sln322388/bsafe-support-and-billing-update?lang=en|access-date=2020-09-02|website=www.dell.com}}</ref>
* On September 1, 2020, Symphony Technology Group (STG) completed its acquisition of RSA from [[Company:Dell Technologies|Dell Technologies]].<ref>{{Cite web |date=2023-04-24 |title=News & Press |url=https://www.rsa.com/news/ |website=RSA |language=en-US}}</ref> RSA became an independent company, one of the world’s largest cybersecurity and risk management organizations.<ref>{{Cite web |title=Learn About Archer Integrated Risk Management Solutions |url=https://www.archerirm.com/about-us |access-date=2023-07-20 |website=Archer |language=en}}</ref><ref>{{Cite web |title=Archer History Timeline |url=https://view.genial.ly/62ceed7afa704c0018d28cb6/interactive-content-archer-history-timeline |access-date=2023-07-20 |website=Genial.ly |language=en}}</ref><ref>{{Cite web |date=2023-07-20 |title=Archer History Timeline |url=https://view.genial.ly/62ceed7afa704c0018d28cb6/interactive-content-archer-history-timeline |access-date=2023-07-20 |archive-date=July 20, 2023 |archive-url=https://web.archive.org/web/20230720133119/https://view.genial.ly/62ceed7afa704c0018d28cb6/interactive-content-archer-history-timeline |url-status=bot: unknown }}</ref>

==Controversy==

===SecurID security breach===
[[File:RSA-SecurID-Tokens.jpg|thumb|RSA SecurID [[Security token|security token]]s.]]


On March 17, 2011, RSA disclosed an attack on its two-factor authentication products. The attack was similar to the Sykipot attacks, the July 2011 SK Communications hack, and the NightDragon series of attacks.<ref>{{cite web
 |publisher    = Command Five Pty Ltd
 |url          = http://www.commandfive.com/papers/C5_APT_C2InTheFifthDomain.pdf
 |title        = Command and Control in the Fifth Domain
 |date         = February 2012
 |access-date  = February 10, 2012
 |archive-date = February 27, 2012
 |archive-url  = https://web.archive.org/web/20120227035957/http://www.commandfive.com/papers/C5_APT_C2InTheFifthDomain.pdf
 |url-status   = dead
}}</ref> RSA called it an [[Advanced persistent threat|advanced persistent threat]].<ref name="RSAHACKED">{{cite web|url=http://www.computerweekly.com/Articles/2011/03/18/245974/RSA-hit-by-advanced-persistent-threat-attacks.htm |title=RSA hit by advanced persistent threat attacks  |date=March 18, 2011 |work=Computer Weekly |access-date=May 4, 2011}}</ref> Today, SecurID is more commonly used as a software token rather than older physical tokens.

===Relationship with NSA===
[[File:Sink_Clipper_campaign.gif|thumb|right|RSA Security campaigned against the Clipper Chip backdoor in the so-called [[Crypto Wars|Crypto Wars]], including the use of this iconic poster in the debate.]]

RSA's relationship with the [[Organization:National Security Agency|NSA]] has changed over the years. Reuters' Joseph Menn<ref name="reuters">{{cite news|url=https://www.reuters.com/article/us-usa-security-rsa-idUSBRE9BJ1C220131220|title=Exclusive: Secret contract tied NSA and security industry pioneer|author=Joseph Menn|newspaper=Reuters|date=December 20, 2013}}</ref> and cybersecurity analyst Jeffrey Carr<ref name="carr">Carr, Jeffrey. (2014-01-06) [http://jeffreycarr.blogspot.dk/2014/01/nsas-10m-rsa-contract-origins.html Digital Dao: NSA's $10M RSA Contract: Origins]. Jeffreycarr.blogspot.dk. Retrieved on 2014-05-11.</ref> have noted that the two once had an adversarial relationship. In its early years, RSA and its leaders were prominent advocates of [[Strong cryptography|strong cryptography]] for public use, while the NSA and the Bush and Clinton administrations sought to prevent its proliferation.

{{blockquote|For almost 10 years, I've been going toe to toe with these people at Fort Meade. The success of this company <nowiki>[</nowiki>RSA<nowiki>]</nowiki> is the worst thing that can happen to them. To them, we're the real enemy, we're the real target. We have the system that they're most afraid of. If the U.S. adopted RSA as a standard, you would have a truly international, interoperable, unbreakable, easy-to-use encryption technology. And all those things together are so synergistically threatening to the N.S.A.'s interests that it's driving them into a frenzy.|RSA president James Bidzos, June 1994<ref>{{cite web|url=http://www2.nytimes.com/1994/06/12/magazine/battle-of-the-clipper-chip.html?pagewanted=all|title=Battle of the Clipper Chip|work=New York Times|date=12 Jun 1994|access-date=8 Mar 2014|author=Steven Levy}}</ref>}}

In the mid-1990s, RSA and Bidzos led a "fierce" public campaign against the Clipper Chip, an encryption chip with a backdoor that would allow the U.S. government to decrypt communications. The Clinton administration pressed telecommunications companies to use the chip in their devices, and relaxed export restrictions on products that used it. (Such restrictions had prevented RSA Security from selling its software abroad.) RSA joined [[Social:Civil libertarianism|civil libertarians]] and others in opposing the Clipper Chip by, among other things, distributing posters with a foundering sailing ship and the words "Sink Clipper!"<ref name="NSApaid" /> RSA Security also created the DES Challenges to show that the widely used DES encryption was breakable by well-funded entities like the NSA.

The relationship shifted from adversarial to cooperative after Bidzos stepped down as CEO in 1999, according to Victor Chan, who led RSA's department of engineering until 2005: "When I joined there were 10 people in the labs, and we were fighting the NSA. It became a very different company later on."<ref name="NSApaid" /> For example, RSA was reported to have accepted $10 million from the NSA in 2004 in a deal to use the NSA-designed [[Dual EC DRBG]] random number generator in their BSAFE library, despite many indications that Dual_EC_DRBG was both of poor quality and possibly backdoored.<ref name="green" /><ref name="schneier" /> RSA Security later released a statement about the Dual_EC_DRBG kleptographic backdoor:

{{blockquote|We made the decision to use Dual EC DRBG as the default in BSAFE toolkits in 2004, in the context of an industry-wide effort to develop newer, stronger methods of encryption. At that time, the NSA had a trusted role in the community-wide effort to strengthen, not weaken, encryption. This algorithm is only one of multiple choices available within BSAFE toolkits, and users have always been free to choose whichever one best suits their needs. We continued using the algorithm as an option within BSAFE toolkits as it gained acceptance as a NIST standard and because of its value in FIPS compliance. When concern surfaced around the algorithm in 2007, we continued to rely upon NIST as the arbiter of that discussion. When NIST issued new guidance recommending no further use of this algorithm in September 2013, we adhered to that guidance, communicated that recommendation to customers and discussed the change openly in the media.|RSA, The Security Division of EMC<ref>{{cite web|url=https://blogs.rsa.com/news-media/rsa-response/|title=RSA Response to Media Claims Regarding NSA Relationship|access-date=8 Mar 2014|author=RSA|archive-date=March 8, 2014|archive-url=https://web.archive.org/web/20140308180157/https://blogs.rsa.com/news-media/rsa-response/|url-status=dead}}</ref>}}

In March 2014, it was reported by {{wipe|Reuters}} that RSA had also adapted the extended random standard championed by NSA. Later cryptanalysis showed that extended random did not add any security, and it was rejected by the prominent standards group [[Organization:Internet Engineering Task Force|Internet Engineering Task Force]]. Extended random did however make NSA's backdoor for Dual_EC_DRBG tens of thousands of times faster to use for attackers with the key to the Dual_EC_DRBG backdoor (presumably only NSA) because the extended [[Cryptographic nonce|nonces]] in extended random made part of the internal state of Dual_EC_DRBG easier to guess. Only RSA Security's [[Java (programming language)|Java]] version was hard to crack without extended random since the caching of Dual_EC_DRBG output in e.g. RSA Security's C programming language version already made the internal state fast enough to determine. And indeed, RSA Security only implemented extended random in its Java implementation of Dual_EC_DRBG.<ref>{{cite news|first1=Joseph |last1=Menn |url=https://www.reuters.com/article/us-usa-security-nsa-rsa-idUSBREA2U0TY20140331 |title=Exclusive: NSA infiltrated RSA security more deeply than thought - study |newspaper=Reuters |date=31 March 2014 |access-date=4 April 2014}}</ref><ref>{{Cite web|url=https://www.trustnetinc.com/|title=TrustNet Cybersecurity and Compliance Solutions|website=TrustNet Cybersecurity Solutions}}</ref>

===NSA Dual_EC_DRBG backdoor===
From 2004 to 2013, RSA shipped security software—BSAFE toolkit and Data Protection Manager—that included a default [[Cryptographically secure pseudorandom number generator|cryptographically secure pseudorandom number generator]], [[Dual EC DRBG]], that was later suspected to contain a secret [[Organization:National Security Agency|National Security Agency]] kleptographic [[Backdoor (computing)|backdoor]]. The backdoor could have made data encrypted with these tools much easier to break for the NSA, which would have had the secret [[Public-key cryptography|private key]] to the backdoor. Scientifically speaking, the backdoor employs kleptography, and is, essentially, an instance of the Diffie Hellman kleptographic attack published in 1997 by Adam Young and [[Biography:Moti Yung|Moti Yung]].<ref name="yy97">A. Young, [[Biography:Moti Yung|M. Yung]], "Kleptography: Using Cryptography Against Cryptography" In Proceedings of Eurocrypt '97, W. Fumy (Ed.), Springer-Verlag, pages 62–74, 1997.</ref>

RSA Security employees should have been aware, at least, that Dual_EC_DRBG might contain a backdoor. Three employees were members of the ANSI X9F1 Tool Standards and Guidelines Group, to which Dual_EC_DRBG had been submitted for consideration in the early 2000s.<ref name="green_other">Green, Matthew. (2013-12-28) [http://blog.cryptographyengineering.com/2013/12/a-few-more-notes-on-nsa-random-number.html A Few Thoughts on Cryptographic Engineering: A few more notes on NSA random number generators]. Blog.cryptographyengineering.com. Retrieved on 2014-05-11.</ref> The possibility that the random number generator could contain a backdoor was "first raised in an ANSI X9 meeting", according to John Kelsey, a co-author of the [[NIST SP 800-90A]] standard that contains Dual_EC_DRBG.<ref name="kelsey" /> In January 2005, two employees of the cryptography company Certicom—who were also members of the X9F1 group—wrote a patent application that described a backdoor for Dual_EC_DRBG identical to the NSA one.<ref name="patent">[https://www.google.com/patents/CA2594670A1 Patent CA2594670A1 - Elliptic curve random number generation - Google Patents]. Google.com (2011-01-24). Retrieved on 2014-05-11.</ref> The patent application also described three ways to neutralize the backdoor. Two of these—ensuring that two arbitrary elliptic curve points P and Q used in Dual_EC_DRBG are independently chosen, and a smaller output length—were added to the standard as an option, though NSA's backdoored version of P and Q and large output length remained as the standard's default option. Kelsey said he knew of no implementers who actually generated their own non-backdoored P and Q,<ref name="kelsey">{{Cite web |last=Kelsey |first=John |date=December 2013 |title=800-90 and Dual EC DRBG |url=http://csrc.nist.gov/groups/SMA/ispab/documents/minutes/2013-12/nist_cryptography_800-90.pdf |publisher=NIST}}</ref> and there have been no reports of implementations using the smaller outlet.

Nevertheless, NIST included Dual_EC_DRBG in its 2006 [[NIST SP 800-90A]] standard with the default settings enabling the backdoor, largely at the behest of NSA officials,<ref name="schneier" /> who had cited RSA Security's early use of the random number generator as an argument for its inclusion.<ref name="NSApaid" /> The standard did also not fix the unrelated (to the backdoor) problem that the CSPRNG was predictable, which Gjøsteen had pointed out earlier in 2006, and which led Gjøsteen to call Dual_EC_DRBG not cryptographically sound.<ref>{{cite web |url=http://www.math.ntnu.no/~kristiag/drafts/dual-ec-drbg-comments.pdf |title=Archived copy |access-date=2007-11-16 |url-status=dead |archive-url=https://web.archive.org/web/20110525081912/http://www.math.ntnu.no/~kristiag/drafts/dual-ec-drbg-comments.pdf |archive-date=May 25, 2011 |df=mdy-all }}</ref>

ANSI standard group members and Microsoft employees Dan Shumow and Niels Ferguson made a public presentation about the backdoor in 2007.<ref>{{Cite web |last1=Shumow |first1=Dan |last2=Ferguson |first2=Niels |date= |title=On the Possibility of a Back Door in the NIST SP800-90 Dual Ec Prng |url=http://rump2007.cr.yp.to/15-shumow.pdf |publisher=}}</ref>  Commenting on Shumow and Ferguson's presentation, prominent security researcher and cryptographer Bruce Schneier called the possible NSA backdoor "rather obvious", and wondered why NSA bothered pushing to have Dual_EC_DRBG included, when the general poor quality and possible backdoor would ensure that nobody would ever use it.<ref name="schneier" /> There does not seem to have been a general awareness that RSA Security had made it the default in some of its products in 2004, until the Snowden leak.<ref name="schneier">{{cite web|url=https://www.schneier.com/blog/archives/2007/11/the_strange_sto.html|title=The Strange Story of Dual_EC_DRBG|author=Bruce Schneier}}</ref>

In September 2013, the ''New York Times'', drawing on the Snowden leaks, revealed that the NSA worked to "Insert vulnerabilities into commercial encryption systems, IT systems, networks, and endpoint communications devices used by targets" as part of the Bullrun program. One of these vulnerabilities, the ''Times'' reported, was the Dual_EC_DRBG backdoor.<ref name="nyt9-13">{{cite news|url=https://www.nytimes.com/interactive/2013/09/05/us/documents-reveal-nsa-campaign-against-encryption.html|work=New York Times|title=Secret Documents Reveal N.S.A. Campaign Against Encryption}}</ref> With the renewed focus on Dual_EC_DRBG, it was noted that RSA Security's BSAFE used Dual_EC_DRBG by default, which had not previously been widely known.

After the ''New York Times'' published its article, RSA Security recommended that users switch away from Dual_EC_DRBG, but denied that they had deliberately inserted a backdoor.<ref name="green">{{cite web|url=http://blog.cryptographyengineering.com/2013/09/rsa-warns-developers-against-its-own.html|title=RSA warns developers not to use RSA products|author=Matthew Green|date=September 20, 2013}}</ref><ref name="ars">{{cite web|url=https://arstechnica.com/security/2013/09/we-dont-enable-backdoors-in-our-crypto-products-rsa-tells-customers/|title=We don't enable backdoors in our crypto products, RSA tells customers|date=September 20, 2013|publisher=Ars Technica}}</ref> RSA Security officials have largely declined to explain why they did not remove the dubious random number generator once the flaws became known,<ref name="green" /><ref name="ars" /> or why they did not implement the simple mitigation that NIST added to the standard to neutralize the suggested and later verified backdoor.<ref name="green" />

On 20 December 2013, {{wipe|Reuters}}' Joseph Menn reported that NSA secretly paid RSA Security $10 million in 2004 to set Dual_EC_DRBG as the default CSPRNG in BSAFE. The story quoted former RSA Security employees as saying that "no alarms were raised because the deal was handled by business leaders rather than pure technologists".<ref name="NSApaid">{{cite news | url=https://www.reuters.com/article/us-usa-security-rsa-idUSBRE9BJ1C220131220 | title=Exclusive: Secret contract tied NSA and security industry pioneer | date=December 20, 2013 | work=Reuters | access-date=December 20, 2013 | author=Menn, Joseph | location=San Francisco}}</ref> Interviewed by CNET, Schneier called the $10 million deal a bribe.<ref>{{cite web|url=http://news.cnet.com/8301-1009_3-57616205-83/security-firm-rsa-took-millions-from-nsa-report/|title=Security firm RSA took millions from NSA: report|publisher=CNET}}</ref> RSA officials responded that they have not "entered into any contract or engaged in any project with the intention of weakening RSA’s products."<ref>{{cite web|url=https://blogs.rsa.com/news-media-2/rsa-response/|title=RSA Response to Media Claims Regarding NSA Relationship|publisher=RSA Security|access-date=January 20, 2014|archive-date=December 23, 2013|archive-url=https://web.archive.org/web/20131223121638/http://blogs.rsa.com/news-media-2/rsa-response/|url-status=dead}}</ref> Menn stood by his story,<ref>{{Cite web|url=https://www.theregister.co.uk/2013/12/23/rsa_nsa_response/|title = RSA comes out swinging at claims it took NSA's $10m to backdoor crypto|website = The Register}}</ref> and media analysis noted that RSA's reply was a [[Social:Non-denial denial|non-denial denial]], which denied only that company officials knew about the backdoor when they agreed to the deal, an assertion Menn's story did not make.<ref>{{cite web|url=http://www.techdirt.com/articles/20131222/23532125671/rsas-denial-concerning-10-million-nsa-to-promote-broken-crypto-not-really-denial-all.shtml|title=RSA's 'Denial' Concerning $10 Million From The NSA To Promote Broken Crypto Not Really A Denial At All|date=December 23, 2013|publisher=techdirt}}</ref>

In the wake of the reports, several industry experts cancelled their planned talks at RSA's 2014 RSA Conference.<ref>{{Cite web|url=https://www.cnet.com/news/privacy/rsa-conference-speakers-begin-to-bail-thanks-to-nsa/|title=RSA Conference speakers begin to bail, thanks to NSA|website=CNET}}</ref> Among them was Mikko Hyppönen, a Finnish researcher with [[Company:F-Secure|F-Secure]], who cited RSA's denial of the alleged $10 million payment by the NSA as suspicious.<ref>{{Cite web|url=https://archive.f-secure.com/weblog/archives/00002651.html|title=News from the Lab Archive : January 2004 to September 2015|website=archive.f-secure.com}}</ref> Hyppönen announced his intention to give his talk, "Governments as Malware Authors", at a conference quickly set up in reaction to the reports: TrustyCon, to be held on the same day and one block away from the RSA Conference.<ref name="arstrusty">Gallagher, Sean. (2014-01-21) [https://arstechnica.com/information-technology/2014/01/trustycon-security-counter-convention-planned-for-rsa-refusniks/ “TrustyCon” security counter-convention planned for RSA refusniks]. Ars Technica. Retrieved on 2014-05-11.</ref>

At the 2014 RSA Conference, former<ref>{{Cite web |url=http://www.rsaconference.com/speakers/arthur-coviello |title=Arthur W. Coviello Jr. &#124; RSA Conference |access-date=July 15, 2015 |archive-date=July 16, 2015 |archive-url=https://web.archive.org/web/20150716023029/http://www.rsaconference.com/speakers/arthur-coviello |url-status=dead }}</ref> RSA Security Executive Chairman Art Coviello defended RSA Security's choice to keep using Dual_EC_DRBG by saying "it became possible that concerns raised in 2007 might have merit" only after NIST acknowledged the problems in 2013.<ref>{{cite web |url=http://uk.emc.com/collateral/corporation/rsa-conference-keynote-art-coviello-feburary-24-2014.pdf |title=RSA Conference 2014 Keynote for Art Coviello |date=February 25, 2014 |url-status=dead |archive-url=https://web.archive.org/web/20140714192650/http://uk.emc.com/collateral/corporation/rsa-conference-keynote-art-coviello-feburary-24-2014.pdf |archive-date=2014-07-14}}</ref>

==Products==
RSA is most known for its SecurID product, which provides two-factor authentication to hundreds of technologies utilizing hardware tokens that rotate keys on timed intervals, software tokens, and one-time codes. In 2016, RSA re-branded the SecurID platform as RSA SecurID Access.<ref>{{Cite web|url=https://www.rsa.com/en-us/company/news/rsa-changes-the-identity-game-unveils-new-securid-suite|title=RSA Changes the Identity Game: Unveils New RSA SecurID® Suite|website=www.rsa.com|access-date=2017-06-06|archive-date=August 2, 2017|archive-url=https://web.archive.org/web/20170802125202/https://www.rsa.com/en-us/company/news/rsa-changes-the-identity-game-unveils-new-securid-suite|url-status=dead}}</ref> This release added Single-Sign-On capabilities and cloud authentication for resources using SAML 2.0 and other types of federation.

The RSA SecurID Suite also contains the RSA Identity Governance and Lifecycle software (formally Aveksa). The software provides visibility of who has access to what within an organization and manages that access with various capabilities such as access review, request and provisioning.<ref>{{cite web |url=https://www.rsa.com/en-us/products/rsa-securid-suite/rsa-identity-governance-and-lifecycle |title=RSA Identity Governance & Lifecycle |access-date=2018-09-24 }}</ref>

RSA enVision is a ''security information and event management'' (SIEM) platform, with centralised log-management service that claims to "enable organisations to simplify compliance process as well as optimise security-incident management as they occur."<ref>{{cite web|title=RSA Envision|url=http://www.emc.com/security/rsa-envision.htm|publisher=EMC|access-date=19 December 2012}}</ref> On April 4, 2011, EMC purchased NetWitness and added it to the RSA group of products. NetWitness was a packet capture tool aimed at gaining full network visibility to detect security incidents.<ref>{{Cite web|url=https://www.emc.com/about/news/press/2011/20110404-01.htm|title=Press Release: EMC Acquires Netwitness|website=www.emc.com|access-date=2017-06-06}}</ref> This tool was re-branded RSA Security Analytics and was a combination of RSA enVIsion and NetWitness as a SIEM tool that did log and packet capture.

The RSA Archer GRC platform is software that supports business-level management of governance, risk management, and compliance (GRC).<ref>{{cite web|title=RSA Archer Platform|url=http://www.emc.com/security/rsa-archer-governance-risk-compliance/rsa-archer-platform.htm|publisher=EMC|access-date=13 November 2015}}</ref>  The product was originally developed by Archer Technologies, which EMC acquired in 2010.<ref>{{cite web|title=EMC to Acquire Archer Technologies, Leading Provider Of IT Governance Risk and Compliance Software|url=https://www.emc.com/about/news/press/2010/20100104-01.htm|publisher=EMC|access-date=28 August 2018}}</ref>

==See also==
* Hardware token
* [[RSA Factoring Challenge]]
* RSA Secret-Key Challenge
* [[Software:BSAFE|BSAFE]]
* [[RSA SecurID]]
* [[Software token]]

==References==
{{Reflist|colwidth=30em}}


[[Category:Cryptography organizations]]
[[Category:Computer security companies]]
[[Category:Software companies of the United States]]

{{Sourceattribution|RSA Security}}