NSA Documents: Attacks on VPN, SSL, TLS, SSH and Tor

---

Attacks against Crypto:

---

• Guide for Analysts on how to use the PRISM Skype Collection
• GCHQ Briefing on the BULLRUN Program
• GCHQ Presentation on the BULLRUN Programs Decryption Capabilities
• NSA LONGHAUL program for end-to-end attack orchestration and key recovery service
• BLUESNORT program on “Net Defense” from Encrypted Communications
• Presentation from the SIGDEV Conference 2012 explaining which encryption protocols and techniques can be attacked and which not
• NSA program SCARLETFEVER explaining how attacks on encrypted connections are orchestrated
• Description of VOIP Telephony Encryption methods and cryptanalytic and other ways to attack

---

Attacks on SSL/TLS:

---

• NSA Experiment for massive SSL/TLS Decryption
• Canadian Document from CES on TLS Trends
• Details on how NSA uses the SCARLETFEVER program to attack Scure Sockets Layer (SSL)/Transport Layer Scurity (TLS)
• Analysis from SSL/TLS Connections through GCHQ in the flying pig database

---

Attacks on VPN:

---

• NSA High Level Description on TURMOIL / APEX Programs on Attacking VPN
• Explanation of the GALLANTWAVE that decrypts VPN Traffic within LONGHAUL
• Intro to the VPN Exploitation Process mentioning the protocols attacked – PPTP, IPSEC, SSL, SSH)
• Analytic Challenges from Active-Passive Integration when NSA attacks IPSEC VPNs
• Overview of the capabilities of the VALIANTSURF program
• MALIBU Architecture Overview to exploit VPN Communication
• POISENNUT Virtual Private Network Attack Orchestrator (VAO)
• NSA Presentation on the development of Attacks on VPN
• NSA Presentation on the Analysis and Contextualisation of data from VPN
• Description of existing projects on VPN decryption
• Explanation of the Transform Engine Emulator when attacking VPN
• Explanation of the POISENNUT Product and its role when attacking VPN
• Explanation of the TURMOIL GALLANTWAVE Program and its role when attacking VPN
• Processing of data from exploited VPN in the TURMOIL program
• Decryption of VPN Connections within the VALIANTSURF program
• Description on the processing of VPN data packets within the TURMOIL program
• Explanation on the SPIN9 program on end-to-end attacks on VPN

---

Deanonymizing:

---

• Explanation of a potential technique to deanonymise users of the TOR network
• Analytics on security of TOR hidden services
• Overview on Internet Anonymization Services on how they work
• TOR deanonymisation research
• TOR Overview of Existing Techniques
• A potential technique to deanonymise users of the TOR network

---

Cryptanalytics:

---

• General Description how NSA handles encrypted traffic
• Intercept with PGP encrypted message
• Classification Guide for Cryptanalysis
• Procedural GCHQ Document on how analysts are to handle encrypted traffic
• NSA / GCHQ Crypt Discovery Joint Collaboration Activity
• NSA Cryptographic Modernization (CryptoMod) Classification Guide
• “National Information Assurance Research Laboratory (NIARL)”: Newsletter, Keyword TUNDRA
• What Your Mother Never Told You About the development of Signal Intelligence
• Intercept with OTR encrypted chat

---

---

Thanks to Der Spiegel for all this information!

---

Create your very own perfectly configured VPS full automatically to encrypt and mask all internet connections for any connected device.

Streisand is an auto configuration program that runs various scripts to setup your own Virtual Private Server (VPS) with all the additional needed programs and configuration to bring encryption to all your internet connections for any device that connects with this server. Very handy and useful to protect your internet connection on a device with less security, like a mobile phone. Highly recommended for those that willing to run their own service, but don’t really have all that knowledge to set this up.

Streisand is compatible with newly registered servers from Amazon EC2, DigitalOcean, Linode and RackSpace (more providers will be added in the future)
It need to be setup from a machine running Linux, BSD or OS X that have installed Python 2.7.

Services that will be installed on the virtual private server (VPS) are:
-L2TP/IPsec with StrongSwan and Xl2tpd.
-OpenSSH with Sshuttle and Tinyproxy.
-OpenVPN with Dnsmasq.
-Shadowsocks with Dante.
-Sslh for Nginx, OpenSSH and OpenVPN.
-Stunnel for wrapping OpenVPN connections and connecting on Android with SSLDroid,
-Tor bridge relay and Obfsproxy with Obfs3 or ScrambleSuit.
-SSL certificates and SSL private keys.
-Creates zero log files.

After installing it creates custom configuration instructions for all the installed services, and makes an HTML file with instructions that can be shared with anyone who you want to connect it’s device with your server.

Click to see the latest prices to rent a sever from: Amazon EC2, DigitalOcean, Linode and RackSpace

Installation instructions for Streisand can be found down here:
https://github.com/jlund/streisand