DEAD DROP ARCHIVES
Episode 5 — Operation RUBICON: The Company That Spied on the World
THESAURUS, MINERVA, and the Swiss factory the CIA owned — reconstructed from the primary record.

Transcript


April 14th, 1986.

Ronald Reagan addressed the American people from the Oval Office.

A bomb had exploded nine days earlier in a discotheque in West Berlin. A United States Army sergeant was dead. 230 people had been wounded.

Reagan told the world who was responsible.

"Based on intercepted and decoded exchanges between Tripoli and the Libyan embassy in East Berlin," he said, "we know that Gaddafi's agents had a role in the bombing."

Intercepted.

And decoded.

In 1986, Libya encrypted its diplomatic communications with hardware manufactured by a Swiss company called Crypto AG.

Crypto AG was the world's most trusted name in encryption. Neutral country. Impeccable reputation. Clients in 120 governments.

The machine that Libya trusted had been modified, before it left the factory, to make it readable.

The Central Intelligence Agency held the master key.

Reagan was describing, on American television, what the most successful intelligence operation in history looked like from the outside.

For another thirty-four years, almost nobody knew what it looked like from the inside.

This is what was inside.


This is Dead Drop Archives. A forensic documentary series.


PHASE 1 — THE NEUTRAL COUNTRY

Washington DC. February 2015.

An editor at the Washington Post received a message.

The message described a Swiss company. An encryption manufacturer. The suggestion was that this company had, for decades, been something other than what it appeared.

The editor forwarded it to a reporter. The reporter began to make calls.

In Mainz, Germany, a producer at the public broadcaster ZDF received a similar message, through a different channel, at roughly the same time.

The two investigations did not know about each other.

Both were looking for the same document.

Crypto AG had been selling encryption machines since 1948.

Based in Steinhausen, a small town in the canton of Zug, Switzerland.

Its founder, Boris Hagelin, had built the M-209 cipher machine for the United States Army during the Second World War. That machine encoded battlefield communications for over a hundred thousand American soldiers. After the war, Hagelin built a company around the technology.

Crypto AG became the gold standard.

When foreign governments needed to secure their diplomatic communications, their military transmissions, their intelligence traffic — Crypto AG was the name they trusted.

It was Swiss. Neutral, by definition. Bound by no alliance. Obligated to no intelligence service.

By the time the reporters began their investigation, over 120 governments had purchased its machines at some point in the previous four decades.

Iran. Egypt. Pakistan. India. The Vatican.

The most trusted name in the industry. In the most neutral country on earth.

Crypto AG was a private company.

Its ownership had been deliberately obscured.

A holding company registered in Liechtenstein. Shares of a type that carry no registered owner — bearer shares, in the legal terminology. Whoever holds the paper holds the company. No name on record.

In the mid-1990s, the German magazine Der Spiegel had traced one strand of the structure to a trust company in Munich, with connections to the German Federal Estates Administration.

The German government.

But which part of the German government, and to what end, the investigation at the time could not establish. The story ran. Nothing followed.

The reporters working in 2015 had a better lead.

They had been told that a document existed.

A document written by the intelligence service that owned the factory.

A document that described what the factory had been for.


PHASE 2 — THE PURCHASE

June 1970.

The Central Intelligence Agency and the West German Federal Intelligence Service — the Bundesnachrichtendienst, the BND — jointly purchased Crypto AG for $5,750,000.

The operation had a longer history.

The CIA had been working to influence the design of Crypto AG's machines since the early 1950s, through an arrangement with Boris Hagelin himself.

The 1970 purchase was the formalization of what had, in practice, already been running for nearly two decades.

The ownership was structured to be invisible.

A holding company in Liechtenstein. Bearer shares. Correspondence routed through intermediaries.

The CIA and BND held a commercial encryption company in the heart of neutral Europe without a single document in either government's name.

The operation had three names.

The original CIA codename was THESAURUS.

When the program was reorganised in the early 1970s, the BND's share became known as RUBICON. The CIA's internal designation became MINERVA.

The same operation. Three names. Two agencies. One factory.

The plan was technically straightforward.

Crypto AG's engineers would design the encryption machines.

CIA and NSA cryptographers — briefed into the program through a separate compartmented channel — would introduce modifications to the algorithms before the machines left the factory.

The modifications were designed to be invisible to outside examination.

Only the CIA and NSA held the decryption keys.

The foreign governments that purchased the machines would encrypt their traffic. The CIA and NSA would read it.

They would be paying Crypto AG — paying the CIA — for the privilege.

Over the next four decades, 120 governments would do exactly that.

The Soviet Union never purchased a Crypto AG machine. Neither did China.

Whether this was suspicion, coincidence, or an intelligence assessment of their own, the documentary record does not say.

Their allies and client states did.

Afghanistan. Syria. Iraq. Saudi Arabia.

Many of the countries most important to United States foreign policy in the second half of the twentieth century encrypted their communications with machines that had been modified, in a factory in Steinhausen, by the agency in Langley.

The technical vulnerability was different in each machine series — updated as cryptographic standards evolved, recalibrated to maintain the appearance of security while preserving the collection window.

For fifty years, the product line was kept current.

The back door was always open.


PHASE 3 — THE CLIENTS

November 1979.

Iranian students seized the United States embassy in Tehran.

52 American diplomats and citizens were held hostage for 444 days.

The Iranian revolutionary government encrypted its communications with hardware it had purchased from Crypto AG.

The CIA's own history records that Iranian government communications were monitored throughout the crisis.

The mechanism is confirmed in that document. No second independent source has been identified.

The CIA's history says the intelligence was valuable. It does not say, in any declassified passage, what specifically it contained or how it was used.

444 days.

The communications that passed through those machines, during those days, were readable to one of the parties in the negotiation.

One party knew.

April 1982.

Argentine forces occupied the Falkland Islands. The United Kingdom sent a naval task force.

The Argentine military encrypted its communications with Crypto AG hardware.

According to the CIA's declassified history, the collection method was Crypto AG.

GCHQ — the United Kingdom's signals intelligence agency — published its authorised history in 2020. That history confirms, independently, that Argentine military ciphers were broken during the conflict, and that the resulting intelligence contributed to the engagement that sank the ARA General Belgrano on 2 May 1982.

323 Argentine sailors died.

Whether the crew of the Belgrano were communicating on Crypto AG-compromised hardware in the hours before the attack, the documentary record does not specify.

The intelligence that found the ship came from broken Argentine ciphers. GCHQ's history and the CIA's history agree on that. The source of the break — both assign it.

April 5th, 1986.

A bomb exploded at La Belle discotheque in West Berlin. A United States Army sergeant was killed. 230 people were wounded, among them 79 American servicemen.

Libyan intelligence officers based at the Libyan embassy in East Berlin had been in direct communication with Tripoli in the days before the attack.

The communications were encrypted with Crypto AG hardware.

The communications were readable.

On April 14th, ten days after the bombing, Reagan went on American television.

"Based on intercepted and decoded exchanges between Tripoli and the Libyan embassy in East Berlin," he said, "we know that Gaddafi's agents had a role in the bombing."

Three days later, United States aircraft struck Tripoli and Benghazi.

The President of the United States had just told the world, in public, that his government was reading Libya's encrypted diplomatic traffic.

He did not say from which company Libya had purchased its encryption machine.

The CIA maintained an internal record of what the operation had produced.

That record did not use cautious language.

The CIA's own internal history called it "the intelligence coup of the century."

In the agency's own words.


PHASE 4 — HYDRA

March 1992.

Hans Bühler landed in Tehran.

Bühler was Crypto AG's best salesman. He had spent years travelling through the Middle East — selling machines to government ministries, military procurement offices, intelligence services.

He believed in the product.

In Tehran, he was arrested at the airport.

The Iranian authorities suspected him of espionage.

They were not wrong about the company. They were wrong about Bühler.

He had no knowledge of the modifications. He had no knowledge of MINERVA. He had been selling, in good faith, hardware he had been told was secure.

He had been told the truth, as far as anyone had told him anything.

He spent nine months in a Tehran prison.

Inside Crypto AG's management, and inside the CIA and BND, the crisis was referred to under a cryptonym.

HYDRA.

HYDRA was a problem with two components.

The first: Bühler was in a Tehran prison for espionage he had not committed, which meant the Iranians might conclude the rigging went deeper than a single salesman and begin examining the machines.

The second: Bühler would eventually be released. And when he was released, he would have questions.

The situation was managed.

Crypto AG paid a portion of a legal settlement to secure his release.

Then the company terminated his employment.

Bühler went to the Swiss press.

The journalist Res Strehle spent months interviewing Bühler after his return to Switzerland.

The resulting account, published in 1994, documents what Bühler knew and what he did not know.

He did not know about MINERVA. He did not know the machines had been modified. He had no knowledge, when he landed in Tehran, that the company he represented had been secretly owned by two intelligence services for over twenty years.

He knew that he had been fired. He knew that the company that had let him spend nine months in a Tehran prison had dismissed him without public explanation.

He said so to anyone who would listen.

The articles ran in the Swiss press. They created noise. Not enough to break the operation — but enough to make the BND nervous.

In 1993, the BND sold its 50 percent stake to the CIA.

The CIA took sole ownership of Crypto AG.

It continued operating the company alone.

For another twenty-five years.

Bühler was not the first.

Fifteen years before his arrest, on 24 July 1977, a Crypto AG employee had filed a report with the Swiss authorities.

Swiss Federal Archives record that the report stated the company's cryptographic systems had been fitted with manipulated key generators — designed, specifically, for interception by the United States and West Germany.

What the Swiss authorities did with that report is not documented in any publicly available record.

The operation ran for another seventeen years after it was filed.


PHASE 5 — THE DOCUMENT

The document the reporters had been looking for existed.

The CIA History Staff had written an internal post-mortem of the MINERVA operation.

Its title was The Intelligence Community's Source.

It had been written to preserve the institutional memory of the program. To document, for the record, what the CIA had built and what it had produced.

It had not been written to be read by journalists.

In 2020, it was.

The Washington Post and ZDF obtained a copy.

According to the joint investigation, the BND had compiled its own account of the operation in 2008, before fully withdrawing from the program. That account was also obtained.

February 11th, 2020.

Washington Post. ZDF. Schweizer Radio und Fernsehen.

Simultaneous publication.

The document confirmed the purchase.

$5,750,000. June 1970. THESAURUS. RUBICON. MINERVA.

The Liechtenstein holding company. The bearer shares. The modified algorithms.

The document confirmed the clients.

120 governments. The intercepts. The intelligence value.

The document confirmed the CIA's own assessment of what it had built.

"The intelligence coup of the century."

In the agency's own words. Again.

One detail in the investigation was not in the CIA history.

In 2018, the final pieces of the company were sold. Crypto AG was dissolved. A successor entity, Crypto International AG, was established in Switzerland under new Swedish ownership.

Following the February 2020 publication, the Swiss federal government permanently revoked Crypto International AG's export licenses. Unable to conduct international business, the company filed for bankruptcy in August 2020.

Swiss parliamentary and criminal investigations were opened and formally closed by the end of 2020.

The parliamentary audit committee — Switzerland's GPDel — published its final report in November 2020.

It concluded that Switzerland's own intelligence service, the SND, had been aware of the CIA and BND ownership since 1993 — and had actively made use of that knowledge.

The criminal investigation, conducted by the Office of the Attorney General, was dropped in December 2020 without major indictments.

The governments that used Crypto AG machines during the years of MINERVA were not formally notified after the publication.

The foreign ministries, military commands, and intelligence services that had trusted the product — they purchased it, they encrypted with it, they believed it was secure — were not informed that the product had been engineered to betray that trust.

They have not been told since.

The Swiss investigations are formally closed.

The file, in most of the jurisdictions affected, was never opened.


CONCLUSION

The CIA's internal history of Operation MINERVA was written as a record of achievement.

It documented, with institutional care, how a Swiss encryption company had been turned into the most productive collection asset in the history of American intelligence.

120 governments. Fifty years. Communications from the Iranian hostage crisis, the Falklands War, the Berlin bombing — and hundreds of operations that the document describes and history has not yet named.

The document was not written to be a confession.

It was written as a monument.

When it became public, it was both.

The question the operation leaves is not complicated.

120 governments bought encryption hardware from what they believed was a neutral company in a neutral country.

The hardware was not neutral. The company was not neutral.

Switzerland's parliamentary audit committee found, in 2020, that Switzerland's own intelligence service had known about the ownership since 1993 — and had actively used the intercepts.

Three parties. One factory. One master key.

The investigations are formally closed. No major indictments. The affected governments were not notified.

The governments that used Crypto AG machines — their foreign ministries, their military commands, their intelligence services — trusted a product.

The product had been engineered, from inside, to betray that trust.

The CIA called it the intelligence coup of the century.

The 120 governments that paid for it called it encryption.

Switzerland's committee called it a known operational fact.

The file is open.


SOURCES

CIA History Staff. The Intelligence Community's Source. Internal post-mortem of Operation MINERVA. Declassified/obtained 2020.

Washington Post / ZDF / Schweizer Radio und Fernsehen. Joint investigation, published February 11, 2020.

Reagan, Ronald. Address to the Nation on the United States Air Strike Against Libya, April 14, 1986. American Presidency Project / Ronald Reagan Presidential Library.

Strehle, Res. 1994. Verschlüsselt: Der Fall Hans Bühler. Zurich: Werd Verlag.

Ferris, John. 2020. Behind the Enigma: The Authorised History of GCHQ. London: Bloomsbury.

Crypto Museum. Technical documentation on Crypto AG machine series. cryptomuseum.com

Swiss Federal Assembly, Parliamentary Control Delegation (GPDel). Final report on the Crypto AG affair, November 2020.

Neue Zürcher Zeitung, "Die Crypto International AG meldet Konkurs an," August 27, 2020.


NOTE ON THE RECORD

This transcript is verbatim. One line in Phase 5 states that the Swiss federal
government "permanently revoked" Crypto International AG's export licenses. The
more precise position is that the Federal Council declined to issue licenses
while the criminal investigation was open, and upheld that refusal in August
2020 after the company sought reconsideration. The bankruptcy stands as stated:
the company's Swedish owners filed with the Zug cantonal authorities on
August 27, 2020.


The archive is open. deaddroparchives.com