The National Security Agency (NSA) has arranged a $10 million-secret contract with RSA to gain access into its Bsafe software as part of its controversial surveillance programs.
The New York Times reported back in September that the federal agency formulated and disseminated a formula that would generate random numbers to create a "back door" in encryption products.
An exclusive report by Reuters on Friday revealed that RSA has closed a $10 million contract with the security agency. RSA is the most important distributor of the faulty formula and it is being distributed through a software tool called Bsafe, which is used to enhance security in personal computers.
The contract involved RSA granting the NSA access to encrypt the security software to get the information they need.
Though the amount seems meager, security filings prove that it is still more than a third of the profit the in-charge department of RSA had taken in during 2012.
After former NSA contractor Edward Snowden revealed the activities of the security agency which shocked majority of the world's computer security experts, along with the formula's weakness, RSA, now a subsidiary EMC Corp, discouraged customers from using the formula.
RSA refused to comment on the issue while EMC Corp. told Reuters: "RSA always acts in the best interest of its customers and under no circumstances does RSA design or enable any back doors in our products. Decisions about the features and functionality of RSA products are our own."
While a number of former and current RSA employee who revealed the contract admitted that the company made a mistake when it closed the deal, some defended RSA's move saying that the company was misled by the agency's officials who said that the formula is a secure technological advance.
One defender said, "They did not show their true hand," claiming that NSA officials did not inform RSA that they knew how to break the encryption.
