Crypto AG and Operation Rubikon

The trust placed in a Swiss supplier

Crypto AG sold encryption equipment to governments that wanted to protect diplomatic, military, and other sensitive communications. In 2020, a joint Washington Post and ZDF investigation, based on internal intelligence histories and records, reported that the CIA and West German BND secretly acquired the Swiss company in 1970 through intermediaries.^[1] The arrangement has been called Operation Rubikon in German and Swiss accounts. It turned a vendor trusted for its Swiss location into an intelligence asset.

Government customers bought equipment from a supplier rather than designing every component themselves. That dependence gave a hidden owner influence over the system entrusted with their secrets. The vulnerability was therefore embedded in an ordinary purchasing relationship, even where the customer understood the importance of encryption.

Compromised products and uneven knowledge

The central allegation is not that the agencies could read every encrypted message in the world. It is that they influenced Crypto AG products so the agencies could exploit communications from customers using compromised systems.^[1] The reporting describes distinct product lines and changing technical arrangements.^[1] The operation depended on a hidden design and commercial relationship, not a universal mathematical break. Precise claims about individual messages or every employee’s knowledge exceed what public records can establish.

The Swiss delegation found that the strategic intelligence service had obtained reliable information about foreign ownership and weak devices from 1993.^[2] It criticized failures to inform political leadership.^[2] The finding concerns particular officials and institutions at particular times; it is not evidence that everyone in Switzerland knew the operation from its beginning.

Oversight and missing records

The BND left the partnership in the early 1990s; reporting says the CIA continued its ownership until 2018.^[1] In November 2020, the Swiss parliamentary oversight delegation issued its own report on the affair.^[2] That inquiry shifted attention from the foreign intelligence operation to a domestic accountability question: what Swiss authorities knew and how they supervised the relationship. The investigation and the original reporting serve different purposes, and neither provides an unrestricted archive of intercepted communications.

The parliamentary report describes preserved operational records as valuable and warns that some other intelligence files had been destroyed.^[2] That affected accountability as well as historical reconstruction. An agency could not adequately supervise a politically consequential relationship if knowledge was withheld from successors and ministers or if the relevant records were unavailable.

Evaluating an entire encryption system

Crypto AG is now a supply-chain security case. A user may choose a sound cryptographic algorithm and still inherit risk from a manufacturer, firmware, random-number generation, maintenance channel, or opaque ownership structure. It does not prove that every commercial encryption product contains a backdoor. It does explain why independent review, transparent governance, reproducible implementations, and realistic threat models are part of security rather than administrative extras.

A cryptographic system includes the device, its configuration and the way it is supplied and maintained. Crypto AG’s history illustrates why evaluating an algorithm alone cannot answer whether a customer’s implementation is trustworthy. It also limits the lesson: this documented operation cannot establish a hidden compromise in an unrelated product without evidence.