In 1970, the Central Intelligence Agency and West Germany’s Bundesnachrichtendienst paid $5.75 million for a Swiss encryption company called Crypto AG. They didn’t announce the purchase. They didn’t change the branding. They didn’t replace the employees. They installed one or two people at the executive level who knew the truth, kept the rest of the workforce in the dark, and for the next 48 years sold encryption machines to more than 120 governments worldwide — machines that the CIA and NSA had rigged so that every message encrypted on them could be read by American and German intelligence as easily as plaintext. The governments of Iran, Egypt, Pakistan, Saudi Arabia, Italy, Argentina, India, the Vatican, and dozens of others paid good money for equipment they believed was protecting their most sensitive diplomatic and military communications. It was doing the opposite. A CIA internal history, leaked in 2020, called the operation “the intelligence coup of the century.” That’s not journalistic hyperbole. That’s the agency’s own classified assessment of its own program.
The Hagelin relationship
The story starts before the CIA owned the company. Boris Hagelin, a Swedish inventor, founded Crypto AG in 1952 after building the M-209 cipher machine that the U.S. military used extensively during World War II. Hagelin relocated to Switzerland and built a business selling encryption equipment to governments worldwide, leveraging Swiss neutrality as a brand asset — a company based in a neutral country, manufacturing security products, seemed inherently trustworthy. By the early 1950s, Hagelin had entered an informal arrangement with William Friedman, the NSA cryptologist widely regarded as the father of American codebreaking. The “gentlemen’s understanding” was straightforward: Hagelin would sell his most capable machines to countries approved by the U.S., and weaker, breakable versions to everyone else. The arrangement was unofficial, personal, and — critically — it worked. Correspondence between Friedman and Hagelin, declassified in 2015, documented the relationship in detail.
By the late 1960s, Hagelin was aging and the informal arrangement was becoming untenable. When French and West German intelligence approached Hagelin in 1967 to propose their own partnership, Hagelin reported the approach to his CIA handlers. The agency decided it was time to buy the company outright. They partnered with the BND, and in June 1970 the purchase was completed. Crypto AG was given the internal codename “Minerva.” The operation was initially called “Thesaurus,” later renamed “Rubicon.” Hagelin’s son, Boris Jr., who had been the company’s sales manager for the Americas, died in a car accident the same year. His father investigated and did not believe it was an accident.
How the rigging worked
The manipulation was elegant rather than crude. The CIA and NSA didn’t install obvious backdoors or program the machines to dump their encryption keys. They weakened the algorithms — specifically, they rigged the keystream generators so that the output, while appearing random to the user, contained mathematical structures that the NSA could exploit to recover the plaintext. To anyone without knowledge of the specific weakness, the encryption looked secure. To the NSA, it was transparent. As the technology evolved from mechanical cipher machines to electronic systems to software, the rigging evolved with it. NSA cryptologists and CIA engineers worked with a small number of witting Crypto AG technical staff to design each new generation of products with weaknesses that were invisible to the company’s own unwitting engineers and to every customer who tested the equipment.
Siemens, the German electronics conglomerate, manufactured teleprinters for Crypto AG, provided management personnel for 20 years, and held a five percent share of the profits. Siemens engineers helped develop the encryption equipment. The Maximator alliance — a second Western signals intelligence partnership comprising Denmark, France, Germany, Sweden, and the Netherlands, operating parallel to the Five Eyes — was also read into the vulnerabilities and exploited them for their own intelligence collection. The circle of governments benefiting from Crypto AG’s compromised machines was wider than the CIA and BND alone.
What it produced
The intelligence yield was staggering across decades of global events. During the 1978 Camp David negotiations between Egypt and Israel, the NSA read every communication between President Sadat and his advisors in Cairo — because Egypt was a major Crypto AG customer. During the 1979 Iran hostage crisis, Iranian communications were intercepted in real time. In 1982, the British government received intelligence during the Falklands War because Argentina’s military encrypted its communications on Crypto AG equipment. In 1986, intercepted Libyan diplomatic traffic between Tripoli and the Libyan embassy in East Berlin provided the evidence President Reagan cited when he ordered the bombing of Tripoli and Benghazi in retaliation for the West Berlin discotheque bombing — and Reagan’s public statement about the intercept nearly blew the entire operation, because Libya and every other Crypto AG customer suddenly had a reason to wonder how the Americans were reading their communications.
By 1988, the CIA and BND were decrypting approximately 19,000 Iranian messages annually — 80 to 90 percent of Iran’s total encrypted traffic. The operation provided intelligence on the South American Operation Condor dictatorships — Chile, Argentina, Bolivia, Paraguay, Uruguay, and Brazil — as they coordinated cross-border campaigns of imprisonment, torture, and extrajudicial killing. The Condor nations used Crypto AG equipment to coordinate their operations. American and German intelligence read the traffic. They knew what was happening. The CIA and BND documents, as the Washington Post reported, “largely avoid more unsettling questions, including what the United States knew — and what it did or didn’t do — about countries that used Crypto machines while engaged in assassination plots, ethnic cleansing campaigns and human rights abuses.”
How it almost fell apart — and didn’t
The operation survived repeated near-exposures across five decades, which is arguably more remarkable than the operation itself. Reagan’s 1986 public reference to Libyan intercepts was the first serious scare. The 1991 assassination of former Iranian Prime Minister Shapour Bakhtiar produced another: Iranian intelligence transmitted a coded message to Iranian embassies the day before Bakhtiar’s body was discovered, and the speed of Western intelligence’s response raised suspicions about how the intercept was obtained.
The most dramatic exposure came in 1992, when Hans Bühler, a Swiss Crypto AG salesman, was arrested in Iran on espionage charges. Bühler had no idea he was selling rigged equipment — he was a genuine salesman who believed in his company’s products. Iran detained him for nine and a half months. Crypto AG paid approximately $1 million in bail for his release. When Bühler returned to Switzerland, he started talking to journalists. Another former Crypto AG engineer who had independently suspected the company was controlled by Western intelligence also went public. The media coverage was extensive. Bühler was fired. But the operation survived. The BND, rattled by the exposure risk, sold its stake to the CIA in 1993 or 1994 for $17 million. The CIA kept going alone. For another 24 years.
Why did it survive? An academic study in Intelligence and National Security identified three factors: geopolitical pressures on target countries that limited their alternatives, the target governments’ limited technical resources for independently verifying encryption security, and individual operational brilliance by CIA-BND agents inside Crypto AG who managed each crisis without the operation collapsing. The simplest factor was the most powerful — there weren’t many alternatives. If you were a mid-sized government in the 1980s and you needed encryption equipment, your options were American, Soviet, or Swiss. The Swiss option looked neutral. It wasn’t.
What it means
The CIA sold Crypto AG’s remaining assets in 2018. The Swiss company was split into CyOne (domestic Swiss sales) and Crypto International AG (international sales under new ownership). The operation formally ended after 48 years of continuous signals intelligence collection from more than 120 governments. But the structural lesson is the one that connects Crypto AG to every other lecture in the Shadowcraft course: the most effective covert operation isn’t one that steals secrets. It’s one that sells the target the tool they’ll use to betray themselves — and charges them for the privilege.
The parallel to modern debates about encryption backdoors, tech company cooperation with intelligence agencies, and the post-Snowden landscape is obvious and uncomfortable. As Warwick University researchers noted after the 2020 revelations: “Long before Edward Snowden released documents of modern firms colluding with intelligence agencies, we can see evidence for significant cases in the past. It certainly is not a recent phenomenon and leads us to ask just how many firms had been working directly with intelligence agencies.” The question the Crypto AG story poses isn’t whether intelligence agencies compromise commercial encryption. It’s how many current products carry weaknesses that will take another 48 years to discover. We cover Operation Rubicon alongside BCCI’s financial architecture, the United Front Work Department’s influence networks, Wagner Group‘s mercenary-propaganda fusion, and the shell company structures that make all of it possible across our Shadowcraft course — 24 lectures on the invisible institutions that shaped the modern world from behind the paperwork.
