Operation Rubicon / Crypto AG (1970-2018)

Introduction

Operation Rubicon is the codename for one of the most consequential intelligence operations of the Cold War era. From the early 1970s through 2018, the CIA and West Germany's Bundesnachrichtendienst (BND) covertly owned Crypto AG, a Swiss company that manufactured and sold cipher machines to governments and militaries around the world. The machines were engineered with deliberate cryptographic vulnerabilities that allowed the CIA and BND to read the encrypted communications of their customers — which included Iran, Libya, Argentina, India, Pakistan, and approximately 120 other nations.

The operation was publicly confirmed on 11 February 2020 when The Washington Post, Germany's ZDF television network, and Swiss broadcaster SRF published a joint investigation based on a classified CIA internal history obtained by the Post. The document — referred to as the Minerva Files — detailed the operation in terms the CIA itself described as "the intelligence coup of the century."

How the Operation Worked

Crypto AG was founded in 1952 by Swedish inventor Boris Hagelin. The company produced mechanical and later electronic cipher machines that were widely trusted by governments seeking secure communications. Beginning in the 1950s the NSA worked with Hagelin to influence the design of machines sold to certain customers while leaving other versions uncompromised for allied governments.

The formal joint ownership began around 1970 when the CIA and BND purchased Crypto AG through a Liechtenstein holding company, concealing their control entirely. The company's Swiss identity and reputation for neutrality were central to its sales appeal. Engineers at Crypto AG — most of whom had no knowledge of the ownership — designed and manufactured the hardware; separately, the intelligence agencies modified the cryptographic algorithms in the H-series and CSE-280 machines to introduce backdoors exploitable only by the owning agencies.

When Iran held American hostages in 1979-1980, US intelligence read Iranian diplomatic cables sent on Crypto AG equipment. During the Falklands War (1982), the US provided Britain with intelligence derived from Argentine communications. When Libya orchestrated the 1986 Berlin discotheque bombing that killed two US soldiers, Reagan administration officials stated publicly they had intercept evidence — derived, it is now clear, from Libyan traffic on compromised machines.

The BND Exit and CIA Sole Ownership

By the early 1990s the BND grew concerned that the operation's cover was at risk. A Crypto AG salesman, Hans Buehler, was arrested in Iran in 1992 on suspicion of espionage. The BND, facing political exposure in Germany if the operation became public, sold its stake back to the CIA in 1993. The CIA continued operating Crypto AG as sole owner, eventually restructuring the company. In 2018 the assets were sold: the Swedish investment firm CyOne Security acquired the Swiss government business unit, and Crypto International took over the remaining international operations. Both successor entities have denied knowledge of the prior ownership structure.

The 2020 Disclosure

The Washington Post obtained the classified CIA internal history through a source. ZDF and SRF conducted parallel investigations using German BND documents and Swiss sources. The joint investigation was published simultaneously on 11 February 2020. The CIA history referred to the operation as "the intelligence coup of the century" and noted that at its peak the agencies were reading the secret communications of more than 120 countries.

The Swiss government launched its own parliamentary investigation. The BND confirmed the broad outlines of the German participation. Former US officials declined to comment or confirmed only what was already published.

Verdict

Confirmed. Primary documentation — including the CIA's own classified internal history — confirms the covert ownership of Crypto AG and the deliberate cryptographic backdooring of machines sold to foreign governments. The operation is no longer disputed. The only remaining questions concern which specific communications were intercepted and what decisions were made based on that intelligence.

What Remains Unknown

• The full scope of intelligence collected and how it was used in specific foreign-policy decisions
• Whether successor companies Crypto International or CyOne inherited any compromised hardware lines
• The complete list of governments that purchased and operated the affected machines

The Mechanics of the Backdoor

Publicly, Crypto AG was an ordinary Swiss manufacturer trading on the same reputation for neutrality that made Swiss banks and watchmakers trusted worldwide. Internally, the CIA and BND ran a two-track operation. Machines built for NATO members and other genuinely allied governments used intact cryptography; export models sold to the roughly 120 other customer governments used algorithms deliberately weakened - by shortening the effective keyspace, seeding predictable patterns into supposedly random key generation, or building in mathematical "trapdoors" only the owning agencies could exploit. The deception worked on two levels at once: most Crypto AG engineers designed and built hardware in good faith, unaware that a small circle of specialists, including outside consultants recruited for the task, were altering the underlying algorithms before machines shipped. The operation's classified names shifted over time - the CIA and BND used the covername Thesaurus through the 1970s and into the 1980s before switching to Rubicon, while the CIA's own internal history of the program, the document obtained by the Post, carries the cryptonym Minerva. What made the scheme durable for nearly five decades was not the weakened math alone, since rivals eventually caught up cryptographically, but the credibility loop it created: satisfied customers recommended Crypto AG to other governments, and each sale reinforced the firm's cover as a genuinely independent Swiss company with no allegiance to Washington or Bonn.

What the Evidence Actually Consists Of

The "confirmed" verdict on this fact-check rests on more than a single leak. The core document is the CIA's own classified internal history of the operation - a formal agency history, not an anonymous tip - obtained by a Washington Post source and cross-referenced against a parallel BND history independently reviewed by ZDF and Swiss broadcaster SRF for their joint 11 February 2020 reporting, giving the story two separate agency paper trails, not one. A third, independent documentary trail emerged later: Switzerland's parliamentary oversight delegation (GPDel), with statutory access to classified intelligence-service files, spent nine months investigating and in November 2020 published its own 64-page report confirming, from Swiss government records rather than CIA or BND material, that Swiss intelligence had held reliable knowledge of the arrangement since 1993. None of this arrived out of nowhere: a 1995 Baltimore Sun investigative series, "No Such Agency," had already alleged - based on former Crypto AG employees and an internal company memo - that the NSA had rigged the machines, using language ("the intelligence sting of the century") strikingly close to what the CIA's own history would use a quarter-century later. Crypto AG denied the 1995 allegations and the denial held. By 2020, peer-reviewed intelligence-studies scholarship, including a special section of the journal Intelligence and National Security, was treating the operation as documented history, not a contested claim.

Scope: Who Was - and Wasn't - a Customer

The oft-cited figure of "120-plus countries" describes the cumulative customer list across the operation's roughly 48 covert years, not a fixed number under simultaneous surveillance at any one time; the CIA's own history frames 120-plus as a peak-era figure. What is consistent across the reporting is the shape of the list: it deliberately excluded the United States' closest Western allies, who used other secure systems, and excluded the Soviet Union and China, both of which reportedly distrusted a Swiss firm's ties to the West and never became customers. The confirmed client roster instead spanned non-aligned and developing-world governments across six continents - Iran, Libya, Argentina, India, Pakistan, Saudi Arabia, Egypt and the Vatican among the more frequently documented names - plus numerous militaries and foreign ministries across Latin America, Africa, the Middle East and Asia. That customer profile is itself evidence for the mechanism above: a Cold War intelligence gap toward exactly the governments whose secure communications Washington and Bonn had the fewest other means of reading.

The Strongest Counter-Argument - and Why It Doesn't Overturn the Verdict

The most serious pushback on this story, made by cryptographers and some former Crypto AG staff rather than by conspiracy skeptics, is that the "every machine was backdoored" shorthand overstates the record. Crypto AG's catalog spanned dozens of product lines across decades; the documented rigging is concentrated in specific families - the H-series and CSE-280 machines named in the CIA history - while other lines, especially those sold to allied governments, were left cryptographically sound. On this reading, a company-wide "every customer, every machine, every year" framing risks overselling a story whose documented core is narrower but still historically enormous. This argument holds up as a corrective to the loosest popular framing, but it does not touch the fact-check's verdict, because the claim being evaluated here is the existence and scale of covert CIA/BND ownership and deliberate backdooring - not a claim that literally every unit Crypto AG ever sold was compromised. On that narrower, correctly stated claim, three independent documentary trails converge: the CIA's own history, the BND's parallel account reviewed by German and Swiss journalists, and Switzerland's GPDel report, built from Swiss government files the CIA never touched. A genuine research question about which specific product lines were affected in which years remains open; it is not a live debate about whether the operation happened.

Aftermath: Investigations, Layoffs, and an Unfinished Reckoning

The 2020 disclosures triggered concrete institutional consequences on both sides of the Atlantic. In Switzerland, the government's own inquiry was quickly superseded by GPDel, parliament's intelligence oversight delegation, which took over in February 2020 and reported that November; it found Swiss intelligence had known since 1993 and had itself drawn on the arrangement, while the Federal Council - the executive branch - was only briefed in autumn 2019, a gap the report called a supervisory failure. Separately, Swiss authorities suspended general export licences for encryption devices from December 2019, filed a criminal complaint against unknown persons under the Goods Control Act that February, then suspended Crypto International's and TCG Legacy's individual licence applications that June; Crypto International laid off roughly 70 employees that August after the government declined to resume processing its applications, and the Federal Administrative Court largely upheld the suspensions that December as "acts of government" outside judicial review. In Germany, opposition lawmakers pressed for clarity on whether Bundestag oversight of the BND had been circumvented, though no BND leadership changes followed. Neither successor firm has been shown to have inherited any compromised hardware line. Six years on, Operation Rubicon remains a standard case study in intelligence-studies scholarship and export-control policy debates, and no comparable Western signals-intelligence operation of confirmed similar scale has since come to light.