Spy radio
Burst encoders
• • • Donate • • •
   Logo (click for homepage)
Secret NSA/Hagelin deal
The Friedman Papers

In the past there have been recurring rumours about a secret collaboration between the NSA and the Swiss company Crypto AG, founded in 1952 by the Swedish inventor Boris Hagelin. Former employees of the company have suggested that there were frequent visitors from the NSA, but allegations to this effect have always been firmly denied and substantial proof was never found.

In 2014, the NSA released more than 7600 documents [1], amounting to over 52,000 pages of historical material relating to the career of William F. Friedman (1891-1969), who is considered the dean of American Cryptology. More than 400 of these documents contain material about Boris Hagelin and/or Crypto AG. Although some documents have been fully declassified, most of them are still heavily redacted as, according to the NSA, they may contain information that could harm national security or any individuals or companies that are mentioned in those documents.

In this light it is remarkable, to say the least, that the current information about Hagelin is now available to us. Although the documents are over 50 years old now, and some of them are still partly classified, they do present us with information that could potentially harm a legitimate and successful world-wide selling Swiss company, Crypto AG, that has many competitors in the US.
It is no secret that Boris Hagelin and William Friedman were good friends. They shared a passion for historical cipher machines and they both suffered from depressions. During WWII they were in close contact after Hagelin 'escaped' to the US in May 1940 and subsequently sold his patent rights to the Americans, allowing them to build the M-209 cipher machine [2][3]. Once the war was over, they maintained their friendly relationship and helped each other on several occasions.

Among the released documents are several hundreds of letters between Friedman and Hagelin. Most of these letters are of a personal nature but some of them contain explicit NSA material. From the documents in the Friedman Collection it becomes clear that the AFSA (the predecessor of the NSA) and Hagelin were already negotiating an agreement of some kind as early as 1951. Although much of the agreement is still unknown, the article below proves the existence of a secret Gentleman's Agreement between the NSA and Hagelin/Crypto AG during the 1950s.
World War II   1939-1945
One of Hagelin's biggest achievements was the sale of M-209 cipher machines to the US Army. Being based on the C-38, a small cipher machine with 6 pin-wheels, the M-209 was adapted to meet the requirements of the US Army. Although Hagelin would normally build all machines in his factory in Stockholm (Sweden), he allowed the American's to build the machine under licence.
On 10 May 1940, Hagelin left on the last ship from Europe to the US, with two prototypes of his machine in his lugguage. It would eventually evolve into the M-209 and would become the largest sale of the so-called C-machines he ever made [3]. The machines were built at the Corona plant of the L.C. Smith typewriter company in Syracuse, with a daily output of up to 500 units.

The image on the right shows a typical M-209 as it was used by the US during WWII. It has 6 pin-wheels at the front, each with a different number of steps, and a cage with 27 bars at the rear.
The converter M-209

As Hagelin couldn't return to Sweden during the war, he stayed in the US where he spent his time serviceing the BC cipher machines 1 of some American organisation. When he returned to Sweden in 1944, more than 50,000 M-209 machines had been built by the Smith Corona Typewriter Company and by the end of the war, this amount had nearly trippled to a staggering 140,000.
To allow production of the M-209 and the BC-38 (shown on the right) in the US, and to avoid paying high tax fees in Sweden, Hagelin had transferred the full and royalty-free patent rights to the US Army, for the sum of US$ 3,023,410, of which US$ 2,548,225 was for him personally. The balance of US$ 475,185 went to the Hagelin Cryptograph Company (HCC) in Sweden [4]. 2

In return, the US Government granted Hagelin a royalty-free license for the production of M-209 and BC-38 machines and improvements thereof, so that he was still allowed to sell his invention.
The BC-38 cipher machine

It is worth noting that the machine did not provide absolute secrecy. During WWII, the Germans were able to decrypt a message in under 4 hours if they had received messages in depth 3 . This was not considered a problem however, as the M-209 was only used for tactical messages (e.g. field maneuvers) which had lost their significance by the time they were broken by the Germans.
  1. A BC cipher machine (e.g. a BC-38) was basically a C-machine (e.g. C-38) that was extended with a keyboard, a motor-driven mechanism and a double printer.
  2. The exact amount of the fees payed to Hagelin are difficult to determine from the papers, as the contract was reopened and renegotiated several times during the war [4]. In the end, Hagelin had to become a US citizen and pay US$ 700,000 in taxes to the US, in order to avoid paying much higher taxes in Sweden.
  3. In cryptoanalysis, receiving messages 'in depth' means that two or more messages were intercepted that had been encrypted with the same key. In case of the M-209, two messages were enough to solve it.

Surplus   1947
Shortly after WWII, in 1947, many M-209 machines that were no longer needed by the US Army, started appearing on the US surplus market for prices as low as US$ 15. On 2 November 1947, in a letter to Friedman [5], Hagelin expresses his concern about the fact that the Dutch Purchasing Commission in the US had bought a first sample order of 100 units. In the letter Hagelin writes:

If this goes on, our own business here will be ruined.

He also points out that this should not be possible as per agreement with the War Department. Friedman answers prompty and replies that this was clearly a mistake and that necessary steps had been taken to ensure that this would not happen again [6]. Nevertheless, the Dutch are able to pick up their order of 100 machines in New York a few days later, which were subsequently sent to the Dutch East Indies, as Hagelin writes to Friedman on 24 November 1947 [7].

The matter clearly worries Hagelin, as two weeks later, on 13 December, he writes again to Friedman asking him to investigate the Automatic Radio Manufacturing Company in Boston, who appears to be offering M-209 A machines for as little as US$ 2 each [8]. And two days later this is followed by another letter, after he has been informed by his Dutch agent that the Dutch Army has been offered 450 cipher machines M-209 from an undisclosed source for US$ 2 [9].

Although Friedman replies to him promptly, it seems that there is little he can do. Although the US Army is free to sell the machines within the US, he reaffirms that they have no intent to sell any surplus machines and that he has no idea who is offering them. He also suggests that the offered M-209 machines may have been unrepairable ones that should have been destroyed [10].
New developments   1950
Immediately after the end of WWII, Hagelin sets out to improve his existing cipher machines, by adding new features and, more importantly, improving security by implementing a new keying mechanism. This new mechanism causes irregular stepping of the cipher wheels and is therefore far less predictable than the regular stepping of the wheels in existing models like the M-209.

Hagelin's patent US 2,765,364 (was: US 188,546) for the new keying mechanism. Click to view the patent.

In August 1950, Hagelin writes to Friedman about his recent developments and announces some new machines [11]. On 5 October 1950, he files a patent for the new machine with the US patent office, followed by applications in Sweden and ten further countries [13]. Early in 1951, the new keying mechanism is ready, as confirmed in a letter that Hagelin writes on 26 January [12].
Another new machine, that is currently under development in Stockholm, is an automatic cipher machine for teleprinter circuits. The machine has a built-in C-line mechanical cipher machine that is used to create a 5-bit pseudo random code, which is mixed with the plaintext.

Apart from the C-line mechanical pin-wheel cipher mechanism, the machine also has a 5-level tape reader that can be used instead. The tape reader can be loaded with a random-key-stream tape, allowing the machine to be used as a One-Time Pad (OTP), or One-Time Tape (OTT).
Close-up of the interior, seen from the front right of the machine.

When properly used, OTT systems are theoretically unbreakable and provide the best possible protection for sensitive information. In practice however, especially in the early 1950s, the key tapes used for these OTT systems were often made with mechanical (deterministic) methods.
The Hagelin Negotiations   1951
In February 1951, a prototype with the new keying mechanism, based on a modified M-209, is sent from Stockholm to the AFSA for evaluation. The new technology causes great upset, as it defeats the existing methods for solving pin-wheel cipher machines. The AFSA is afraid that Hagelin might want to sell machines with this new technology to countries like the USSR [14].

At the same time, Hagelin is regarded a 'good friend' and a valuable source of information about other nations and their developments. In a USCIB meeting on 9 March 1951, it is reported that negotiations have been started with Boris Hagelin. On 22 May 1951, in a meeting at AFSA, the situation is discussed with various parties, including the CIA. At this meeting, Friedman presents a detailed report in which the Hagelin Company and the current situation are analysed [14].

Although most of this report is still classified, we can derive the following from it:
  1. Hagelin is at that moment the only civil manufacturer of cipher machines in the world, 1
  2. AFSA considers the Hagelin Company as a serious international player,
  3. AFSA considers Hagelin's expanding market as a security threat,
  4. AFSA considers Boris Hagelin a good and loyal friend,
  5. The US wants to prevent the new technology from being developed,
  6. The US will pay Hagelin the sum of US$ 700,000,
  7. In return for this, Hagelin will supply intelligence about other nations,
  8. Hagelin's offices and agents abroad will be of use in this information-gathering,
  9. Hagelin's new technology will be considered for use by NATO,
  10. Hagelin's OTT technology might also be of use to NATO.
With respect to point (5) above, the report literally says:

         It would be to the advantage of the U.S. Government if the
   proposed new or improved Hagelin cryptoequipments were prevented from being
   developed, manufactured, and sold commercially on the open market.

Concerning point (7), it is even contemplated that it might be possible to gather intelligence from the USSR and its satellites, if Hagelin was allowed to sell to them (closely controlled, of course), but it is doubted as to whether the USSR would buy from a (former) American protegee.
  1. In this context, 'civil' has to be read as 'on the open market'. There were other manufacturers, such as Siemens and Philips, but their markets were largely controlled by their governments and the military.

Secrecy Order on Patent   1952
It is currently unknown whether the deal between AFSA and Hagelin as described above was actually effectuated, but from the surviving documents and correspondence in later years, it seems fair to believe that it was, as Hagelin kept passing sensitive information to Friedman.

But then, on 14 September 1951, things go horribly wrong when Hagelin's patent for the new technology (US 188,546) is placed under Secrecy Order at the request of the AFSA, nearly a year after it was filed by Hagelin. Hagelin is very upset by this - he doesn't know what to do - and Friedman is furious as he sees a long-term relationship with a reliable friend being jeopardized.

Friedman comments that the patent has been filed in 10 other countries in which the US has no jurisdiction, so there is no secrecy whatsoever. He also argues that, if thousands of these systems are in use, it is unrealistic, if not absurd, to think that one could keep it secret. Furthermore, the US could be liable to suit by Hagelin, with claims running into millions of dollars. Finally, on 27 March 1952, the Chief of the Office of Communication Security of AFSA withdraws the secrecy order and requests the relationship between the US and Mr. Hagelin to be reexamined [13].
US sales of M-209   1953
The 'situation' with the M-209 was not solved permanently and would return on several occasions in the following years. By October 1953, the US had received requests from several countries for the release of of M-209 machines, but pending Negotiations with Mr. Hagelin, the AFSA (by now: NSA) refused to do so [15]. This prompted the US Army to come up two months later with a list of countries that were currently using the M-209 and/or who had requested access to them [16]:
  • Philippines
    On 12 June 1951, the US Army has supplied 229 converters M-209 to the Philippine Armed Forces with the consent of AFSA in addition to the 369 units that were already in use there at the time.

  • Uruguay
    On 6 October 1952, the Uruguayan Government wanted to buy 36 converters M-209, but this request was turned down on 14 October 1952, saying that the equipment was not available for sale.

  • India
    On 16 March 1951, India indicated that they wanted to buy M-209, M-209a and M-209b machines from commercial sources (presumably in the US) but that they wanted to have copies of the TM 11-380 manuals before doing so. The request was denied as it was addressed to the wrong department.

  • France
    On 23 september 1952, France wanted 450 converters M-209 in addition to the 1850 units that were already in use at the time. The request was turned down for several reasons. On 22 September 1953, France again put in a request for 350 units for use in French Indo-China. This request was turned down by the NSA as it might jeopardize current negotiations between the NSA and Mr. Hagelin in Sweden. The restrictions on France were later lifted on 12 January 1954 after approval from Hagelin (see below).

  • Portugal
    On 23 June 1953, Portugal requested clearance for a supply of modified M-209b converters, but this request was denied on legal grounds.

  • Turkey
    On 16 August 1950, The Turkish Army requested procurement of M-209 machines or, if it was denied, suitable action to allow such machines to be obtained from commercial sources in Sweden. The request was denied, but the American CSP-845 strip cipher was offered as an alternative. On 22 May 1953, Turkey put in a request for 600 M-209s, but it was turned down again, this time on the ground that it would exhaust US reserves.

  • Latin America
    M-209 converters were in use by the Governments of Ecuador (1947), Venezuela (1948), Argentina, Columbia and Peru (1951). Some training was given to those countries, although this was strictly prohibited, as reconfirmed in a memo of 17 February 1953.
The request for M-209 machines from France in September 1953 was denied by the NSA pending negotiations with Hagelin. Although there was not yet a deal in place between the NSA and Hagelin at that time, on 12 January 1954, the restriction for France was lifted after Boris Hagelin had given his consent. This allowed the French to buy more M-209 machines for Indo-China [17].
Gentleman's Agreement   1954
In the meantime, Hagelin had further developed his new machines and was ready to take them into production. The first one was the C-52. It was similar to the old M-209, but had replaceable wheels. The next one was the CX-52, which was similar, but featured the new keying mechanism.
The order of the pin-wheels could be swapped and it was even possible to have up to twelve different wheels to choose from. The machine was suitable for the 26 letters of the Latin alphabet. Each wheel had a different number of segments and advanced in an irregular manner.

In a memorandum of 5 February 1954, the NSA expresses its concerns about the newly released Hagelin machines, in particular the CX-52, the TC-52 and the forthcoming TC-55. Friedman is asked to liaise and make a proposal to Hagelin on behalf of the director of the NSA (DIRNSA).
The much-feared CX-52 with irregular wheel stepping

It is further agreed that Friedman will be using his personal stationary and private address for any correspondence with Hagelin, in order not to ring any bells when official NSA letters arrive in a small European town [16]. Following this, and in anticipation of the outcome, Hagelin and DIRNSA enter into a Gentleman's Agreement or, as they call it, a Gentleman's Understanding, for a period of 6 months, during which time the details of the renewed Hagelin Negotiations will be finialised.

Although the exact details of the negotiations with Hagelin have not yet been declassified, it must have been a very serious matter, as it took the NSA twelve months, rather than the anticipated six months, to come up with a suitable proposal. Finally, in February 1955, Friedman travels to Zug (Switzerland) for a 'personal' visit to Boris Hagelin, with the intent to present him a new proposal.
Friedman's visit to Zug   1955
21-28 February 1955

On 21 February 1955, Friedman arrives in Zug (Switzerland) and stays at Hagelin's home for a full week, during which time they discuss cryptographic, business and private matters. Boris Hagelin's son, Bo, will also be present during some of the meetings. During these meetings, Friedman asks about the differences between the various machine variants and about the customers that these machines are sold to. Finally, he makes the proposal which he has been authorised to make.

The following information was extracted from the report that Friedman filed on his return to the US, on 15 March 1955. Unfortunately, much of this report has been redacted, but fortunately for us, there are three versions of this document, each of which has been redacted differently [18][19][20]. As a result we are able to fill-in some of the gaps and get a more complete picture.
Move to Switzerland
At this point in time, the factory in Stockholm (Sweden) is manufacturing the current C-line of machines (C-52 and CX-52) with a capacity of 60 to 80 machines per month. Besides these machines, the Stockholm plant has also received an order for 500 to 1000 old C-446 machines. Hagelin is about to close down the factory in Sweden and move the entire production and the production facilities over to a new building in Zug (Switzerland) as soon as this is ready.
The top floor of the new building will be converted into an appartment for Sture Nyberg, the current plant manager in Stockholm, who will move to Zug with his family to become the new plant manager there. It is Hagelin's intention to let his son Boris Hagelin Jr. (Bo) take over the company when he himself retires in two years time as he reaches the age of 65.

The message that the old C-446 is to be taken into production again, plus Hagelin's suggestion that he might want to make more, and sell them to other countries, clearly pleases Friedman.
The interior of the C-446-A, seen from the right.

Being very similar to the M209, Friedman reports about the C-446: This model is, of course, easier to solve than the new models. Production of the C-446 machines will be completed in Sweden, even after the move to Zug is completed, where the Johannes Gauge Company has taken over the building and the workers and has been given the tools, jigs and dies on loan.
New technology
Amoung the things Friedman wants to discuss, are the capabilities of the new machines, in particular the C-52 and CX-52, and the various variants of these machines. For this, Friedman and the Hagelins agree to use specific (secret) designators, which are actually suffixes to the model name. First of all, Hagelin recognises the following two classes of C-line machines:
  • Class 1
    Where all keywheels advance the same number of steps. In the case of the M-209, the C-446 and a particular version of the C-52, the advance is 1 step. The machines in this class are not to be equipped for operation with One-Time Tape (OTT).

  • Class 2
    Where stepping is irregular and where OTT readers are provided, as well as equipment for producing OTT tapes. These machines use the new technology.

Class 1 machines
  • M-209
    No longer in production but still in use with the US Army and some of its customers.

  • C-446
    No longer in production but still in use by some countries, including The Netherlands. Will be taken into production again for a limited period, following an order for 500 to 1000 units by the Foreign Office and the Department of Defense of The Netherlands.

  • C-52
    By default, this model is compatible with the M-209 and C-446, but can also be made to function with interchangeable key wheels and with key wheels that have a larger number of elements (steps) than M-209 and C-446. The C-52 can be supplied with more than 6 key wheels and may also have more slide bars than the M-209 and C-446.

Class 2 machines
  • CX-52a
    This model is supplied with Standard A slide bars, which produce irregular or varying angular displacements of the key wheels, each wheel advancing 0, 1, 2, 3, 4 or 5 steps on each operation. This is the default and most secure version of the machine.

  • CX-52b
    This model is supplied with Standard B slide bars, which produce regular or fixed anglular displacements of the key wheels, all advancing the same number of steps, but the number of steps may be any one from 1 to 32. It is weaker than the a-variant.

  • CX-52c
    This model is compatible with the old types of C-machines, the M-209, the C-446 and a certain version of the C-52. It is the weakest of the models.

  • CX-52ak
    This is basicially a CX-52a that is enhanced with the so-called Complementary feature (here written as 'Komplimentary'), also known as the Hüttenhain 1 feature.

  • CX-52bk
    This is a CX-52b that is enhanced with the Hüttenhain feature. This variant is built by HELL (licenced by Hagelin) for the German and Austrian market for which HELL has an exclusive contract. It is the only version that is approved by Dr. Erich Hüttenhain 1 for use by the German Bundeswehr (Army), where it is known as the HELL H-54.

  • CX-52ck
    CX-52c with Hüttenhain 1 feature.

  • CX-52/10
    This is a 10-digit numerical-only variant of the CX-52. These machines can be of the a, b or c type and may have the complementary feature as well. For example: CX-52ak/10.

  • CX-52/30
    This is a 30 character version of the CX-52, suitable for the Arabic (and possibly Russian) alphabets. For example: CX-52/30 Arabic.

  • CX-52/RT
    This is the Random Tape or One-Time Tape (OTT) variant of the machine.

HELL H-54 (CX-52bk) aside a CX-52ak (right)

  1. During WWII, Dr. Erich Hüttenhain was the chief cryptologist of the Third Reich. After the war, he was employed by the new German Intelligence Agency, the Organisation Gehlen (OG), in 1956 renamed to Bundesnachrichtendienst (BND).

Customers   1955
One of the goals of Friedman's visit to Zug, is to find out what models Hagelin is selling to which customers. When asked, Hagelin gives a full rundown of his current customer base, without any hesitation, and provides details of the machines he has sold or is currently selling to them:
  • Egypt
    Negotiating for 50 x C-52 and 10 x BC-52
  • Jordan
    10 x C-52, 20 x BC-52 (UK is paying for this order)
  • Iran
    No agent, no interest
  • Iraq
    Negotiating for 50 to 200 x C-52 with Arabic characters
  • Syria
    50 x C-36 1
  • Saudi Arabia
    No agent, no sales yet
  • India
    Interested in C-52 and BC-52
  • Pakistan
    Waiting for C-52 for Hindustani (29 or 30 characters)
  • Belgium
    200+ x CX-52a, 100 variable type wheels for C-446
  • France
    80 x CX-52a, 20 x CX-52a/10 (for study), interested in HX
  • Portugal
    5 x CX-52a
  • Italy
    Awaiting NATO viewpoint on CX-52
  • Greece and Turkey
    Interested, documentation sent. Trip postponed.
  • Holland
    500 to 1000 x C-446, some with OTT (C-446/RT)
  • Dutch Army
    Interest in CX-52 and BCX-52.
  • United Kingdom
    2 x CX-52
  • Germany and Austria
    H-54 supplied by HELL (CX-52bk) 2
  • Sweden
    Will replace their C-446 by CX-52 units (long-term)
  • Spain
    Interested in C-52, no orders yet
  • Eire
    2 x CX-52
  • Indonesia
    20 to 30 x C-52 (waiting for order)
  • Poland and Hungary
    2 x C-446 each 3
  • Jugoslavia
    Interested in C-machines 4
  • Central America
    Not much interest (see below)
  • Costa Rica
    2 x C-446
  • Cuba
    Initially interested, but no sales
  • Mexico
    Currently trying to raise interest
  • Venezuela
    About to order some machines
  • Brazil
    60 x CX-52c, interested in 500 more
  • Argentine
    13 x CX-52c
  • Chile
    Not much interest, will buy some
  • Peru
    Interested in 200 x CX-52
  • Paraguay
    No interest
  • Uruguay
    5 x CX-52, 2 x BC-52 (first experience with crypto)
  • Columbia
    100 x CX-52, 40 x BCX-52
  1. Being asked by Friedman where he got the old C-36 machines from, Hagelin replied that they had found some in the basement of the plant in Stockholm.
  2. The CX-52bk (or HELL H-54) was the only model that was approved by Dr. Erich Hüttenhain for use by the German Bundeswehr (Army).
  3. The head of Swedish COMINT, Rossby, didn't think the Russians were helping their satellites with cryptographic advice or material. Friedman decided not to comment on this.
  4. At this point, Hagelin was treating Yugoslavia the same as the Arabic countries, but Friedman suggested to treat them as a satellite of the USSR (Russia). Hagelin replied: That's OK with me if you want it that way.

Teleciphering equipment
As announced in 1950, Hagelin now produces equipment for the online/offline protection of teleprinter circuits. During the meeting, Hagelin tells Friedman that the TC-52, which has been in production for a while now, will soon be replaced by the improved TC-55. Both machines offer two types of encryption: built-in pin-wheel encryption and, as an option, One-Type Tape (OTT). The NSA is clearly worried about the availability of automatic OTT equipment to certain countries.
Pocket cipher device
Both Hagelins are very enthusiastic about the new pocket cipher device that is currently being developed. The device uses six notched discs and operates just like the C-machines, albeit without the slide bars. The cipher discs will be made of plastic and should be user-configurable. Furthermore, Hagelin Sr. hopes to be able to add a small paper strip printer to the design.
Although Hagelin Sr. gives the impression that he invented the machine himself, his son Bo tells Friedman, in a private conversation, that it was actually his idea and that it was initially rejected by his father in 1951. The idea came to mind after repeated requests from various customers for a cipher machine that would fit in a pocket.

Recently, the Swedish company Transvertex, introduced a small pocket size cipher machine that was developed by Vigo Lindstein, a former Hagelin employee. The machine is called HC-9 and was at this time under evaluation at NATO.
The Transvertex HC-9, a portable cipher machine developed in Sweden by Vigo Lindstein, a former Hagelin employee.

According to Bo, this has prompted his father to come up with a smaller device, of which he now thinks that he invented it. When Bo suggested that it was actually his idea, and that he would like to receive some royalties over it, his father had become furious, Bo tells Friedman in confidence. Patents for the new machine, that will be called CD-55, have been filed and it will soon be taken into production. Various models are being considered, including one, if possible, with OTT.
Siemens and Halske
Many other interesting points are raised during the various meetings between Friedman and Hagelin on this visit, such as the modification of the B-211 for the French, and the production of HX and CX machines by the private French company Societé Electronique Automatisme (SEA).

Another point that is raised, is the current situation with Siemens and Halske. Although the German Siemens company clearly is a competitor of Hagelin, there are strong connections and there have been frequent exchanges of information between the two companies, some of which in relation to the work of Dr. Erich Hüttenhain, the former Cryptologist of the Third Reich who now works for the German Intelligence Service, the Bundesnachrichtendienst (BND).

At several moments in history, Hagelin contemplated selling his company to Siemens, but this never happened. In the talks with Friedman, Hagelin mentions that the relations with Siemens and Halske are now formalised in a signed contract. As a result, Siemens will not make any crypto­machines themselves and Hagelin will refrain from producing teleprinter machines. In this contract, the market for teleciphering machines is divided as follows:

Siemens alone
  • West Germany
  • West Austria
  • Jugoslavia
  • Portugal
  • Ireland
  • America (all except Brazil, USA and Canada)
  • Africa (all except Egypt)
  • Asia (all except India, Indonesia and China)
  • Australia
Crypto AG alone
  • France
  • Italy
  • Switzerland
  • Sweden
  • Norway
  • Benelux 1
  • Brazil
  • Egypt
  • India
Siemens and Grypto AG together
  • Denmark
  • Greece
  • Spain
  • Indonesia
Areas not yet agreed
  • Finland
  • Russia and all satellites
  • East Germany
  • China
  • USA and Canada

  1. Benelux is the abbreviation for Belgium, Netherlands and Luxemburg.

The Hagelin Deal   1955
After having been Hagelin's guest for several days, on the evening of 25 February, Friedman feels the time has come to place the NSA proposal before Hagelin, or, as he puts it in his report: the real object of my visit to Zug. He begins by thanking Hagelin for his patience and for keeping his part of the Gentleman's Agreement, despite the fact that the NSA has exceeded the deadline.

The NSA had been struggling for more than rwelve months, rather than the anticipated six, to work out a proposal that would be satisfactory for them (the NSA) as well as perhaps acceptable to Hagelin. They had hit upon a simple one that he was now authorised to place before Hagelin.

Hagelin replies by thanking Friedman for the appreciation and understanding of his position and for various favours that were done for him and his family, in particular for his son-in-law Conradi and for his wife's cousin Miss Barth, who had been given a position at the NSA or the US Army.

Friedman then conveyed to him practically verbatim the terms of the proposal authorised in USCIB: 29.14/29 of 27 December 1954. He tells Hagelin that he does not have to decide right away, and that he can take some time to think it over, but to his great surprise, Hagelin accepted the proposal then and there, without any reservations or desire for modifications.

When Friedman offers him to ask DIRNSA to confirm the deal in a formal letter, Hagelin replies that he doesn't want anything with respect to this deal on paper. Unfortunately, the contents of the proposal authorized in USCIB: 29.14/29 are still classified, but this is what we know so far:
  • From 28 February 1955 onwards, an agreement exists between the NSA and Hagelin,
  • The deal is secret and is for an undefined term (no end-date),
  • Hagelin will refrain from doing certain things, 1
  • Hagelin will not be payed for this (not doing something),
  • Hagelin will continue to gather information for the NSA,
  • The NSA will write the brochures and manuals for the CX-52 models [21]. 2
  • The NSA will also write the manual for 'proper usage' for NATO. 3
Further to this we can make a few 'educated guesses':
  • Hagelin will continue to receive personal favours for him and his family.
  • Hagelin will be able to buy back several lots of M-209 machines.
  • The NSA will help Hagelin to get a machine approved by NATO.
  • Bo Hagelin Jr. has asked for a TYPEX machine which Friedman hopes to find for him.
  • The US Army will place a large order for C-52 and CX-52 machines.
  1. In this context it is assumed that Hagelin agreed not to sell certain versions of his machines to certain countries. As a result, these countries would use weaker machines which were easier for the NSA to break.
  2. These manuals were written by Dr. Harold J. Stukey and Francis A. Raven of the NSA [16].
  3. In order to make best use of their machines, Hagelin usually released a manual for 'proper usage'. For the machines used by NATO, it was agreed that the NSA would write this manual. This could imply that Hagelin received NATO orders as part of the deal with the NSA, but this can not be confirmed at present.

CX-52 Manuals
In the past, Hagelin has noticed that some of their customers are not using their cipher machine to the best of its abilities. For example: the configurable pins on the cipher wheels and the lugs on the sliding bars can be set up in such a way that the cipher period 1 is shortened. In order to avoid such situations, Hagelin has issued a manual for 'proper usage' for each of his machines.

One of the outcomes of the Hagelin Deal, is that the NSA will provide the manual for 'proper usage' of the CX-52. The manual will be written by Dr. Harold Stukey and Francis A. Raven, two high ranking cryptologists at the NSA. Although this can be seen as a gesture of courtesy on behalf of the NSA, it is far more likely that it was used by the NSA to weaken the cipher by manipulating the instructions for best use. It takes the NSA seveal months to complete the manual, during which time Friedman regularly keeps Hagelin informed about the progress.

During the meeting, Hagelin is clearly worried about the proper use of his machines by NATO. He asks Friedman how he can assure that NATO uses the devices properly. Friedman answers that he does not need to worry and that the NSA will take care of that too. This means that the NSA will also write the instructions for best use for NATO. This fits in with the NSA's desire of the 1950s to improve the overall cipher security of their NATO partners, in particular that of France. 2
  1. In cryptography, the cipher period is the time it takes for the key stream to repeat itself.
  2. At this time, France is known to use weak cipher systems and/or use their stronger cipher systems in an improper manner, as a result of which many NATO secrets have leaked to the USSR (Russia). Various memos in the Friedman Archive confirm that the NSA is determined to fix this leak.

Friedman's retirement   1955
On his return from Zug to the US, Friedman suffers a heart attack and is hospitalised, which delays the implementation of some of the points of the agreement. After he is discharged from the hospital, Friedman works from his home for a while and writes to Hagelin several times.

Later that year, in August 1955, Friedman retires from the NSA but will remain working for the agency as a consultant. Due to his bad health - he has a serious heart condition - he is unable to handle Hagelin, so the NSA sends Dr. Shinn in his place while Friedman takes a step back.
Bo's move to the US   1956
Although Hagelin initially wanted to let his son, Bo, take over control of the company after his planned retirement in 1957, he has his doubts about the competence of his son and feels it would be better to let him run his own business for a while. He suggests that Bo should handle the Latin American crypto market, before taking over the company completely. Bo, meanwhile married to his American wife Edith, moves to Washington and sets up his own business there.
Friedman's visit to Zug   1957
22 September 1957

After Friedman's retirement, Dr. Shinn visits Hagelin a few times and exchanges information with him, keeping Friedman in the loop by sending him copies of the reports. Hagelin does not seem to be too happy with Sinn, as in 1956 he is replaced by Friedman's colleague Howard Barlow.

Then in 1957, during a planned visit of Barlow to the factories in Stockholm and Zug, Hagelin specifically asks for Friedman to meet him in Zug in order to continue the talks with regard to the Gentleman's Agreement, and to see the latest developments. He arrives in Zug on 22 September 1957 and stays at Hagelin's home for a week, during which time a variety of subjects are touched.

During this week, Hagelin himself briefly travels to Paris for a meeting with the French Army, where he gets a large order for cipher machines. On his return he reports his dealings with the French to Friedman. Whilst Hagelin is away, Friedman visits the factory and laboratories and is shown the latest developments by manager Sture Nyberg and chief developer Oskar Stürzinger.

Hagelin and Friedman talk at great length on a variety of subjects, customers and competitors. Friedman seems to be very interested in what Siemens are currently doing with respect to their online OTT systems and how they are dealing with the problem of radiation (TEMPEST).
Re-injection patent
The first thing to be discussed between Hagelin and Friedman, is patent 2,802,047 that Hagelin has filed in the US in October 1953 and that had been granted just last month. Although it was granted in the US, the patent was declined in Japan. Hagelin wonders why that would be the case.
The patent describes a cipher machine in which more contacts are used on the cipher wheels than are actually needed and where the extra contacts on the output of the drum are looped back to the input. This method can be described as re-entry or re-injection and will be used in Hagelin's new HX-machine that is underway.

Friedman was shocked when he saw the patent, but didn't tell that to Hagelin. The principle of re-injection was registered by the US around 1940 in a secret patent, so Hagelin's attempt should have raised a declaration of interference.
The American AFSAM-7 (later: KL-7) that uses the re-injection patent

The re-entry principle was conceived during WWII by Albert Small, whilst he worked for the Army Signal Intelligence Service (ASIS), trying to solve the high-level Japanese diplomatic Purple cipher. The principle has since been used at the heart of the high-level American cipher machine AFSAM-7 (later: KL-7), shown in the image above, that was also adopted by NATO.

Although officially Hagelin should not be aware of the existence of the AFSAM-7, in later talks he mentions that many of its operators are experiencing contact problems with the rotors. 1 This proves that Hagelin was well aware of the existence of the machine and that he might have been aware of the re-injection principle being used in it. He also explains how he conceived the idea after a trip to Bonn in 1952, were he was told something 2 by Dr. Huttenhain, followed by discussions with his chief developer Oskar Stürzinger, but stresses that it was his own idea.
  1. This is actually correct; the KL-7 was known for its many contact problems if the maintenance instruction were not strictly followed.
  2. It is currently unclear as to what Hüttenhain told Hagelin on this occasion, or what Hagelin discussed with Stürzinger afterwards, as the original document is redacted at this point. It is entirely possible though, that Hüttenhain was talking about the AFSAM-7. The same principle was later also used in the Russian Fialka.

Problems with Bo
From his arrival on the 22nd, it had been clear to Friedman that there were problems between Boris Hagelin Sr. and his son Bo. Since arriving in the US, where he is now handling the sales of cipher machines to the Latin American countries, Bo had been spending too much money (privately) and has even asked Boris for US$ 25,000 as an advance payment on his inheritance.

After sending the US$ 25,000 plus another US$ 5,000 to Washington, Hagelin, irritated by his son's financial conduct, said that no more money was to be sent to him. According to Boris and his wife Annie, the problems were largely due to compatibility issues with Bo's American wife Edith. Dr. Hell, who had visited Bo in the Spring of 1956, had reported that Bo was homesick for Switzerland and wanted to return to Europe, but that his wife was opposed to this idea.

Hagelin confines to Friedman that he had contemplated merging his business with Siemens as he is tired of being the only whipping boy. Once merged with Siemens, they could take over the handicaps imposed by limitations and restrictions as to whom I can sell what machines, Hagelin says. Friedman asks whether he has thought of merging his business with Hell, but Hagelin rejects that idea, as Hell is in a different kind of business, whilst Siemens would be more suitable.

Unknown to his son Bo at this point, is Hagelin's decision to finally move the activities from the Stockholm factory fully over to Zug, as he wants all developments and operations in a single place. If they want to so, the Stockholm employees are allowed to move to Zug as well. Although Hagelin initially wanted to handover management of the company to Bo, he doesn't see that happening in the nearby future, and thinks that he has to stay on for a number of years.

Friedman also seems to have trouble with Bo, as he reports to Hagelin that Bo is currently visiting every legislation and embassy in Washington in order to 'educate' them with instructional literature about proper usage of the equipment. There was one document in particular that bothered the NSA and Friedman asks Hagelin what he can do about it. Hagelin answers that, with Bo being a citizen of the United States, the NSA is in a far batter position to do anything about it.
OTT machines
Friedman and Hagelin have long discussions about Siemens and their use of OTT equipment. Hagelin has heard that Siemens was about to sell OTT equipment to a country behind the Iron Curtain, and he wanted to find out whether this was true. It is then that he learned that the German Government had given Siemens the green light to sell their OTT equipment, including suitable OTT generators, the every country in the world, except for the USSR and its satellites.
Hagelin thinks that his company will follow suit. Siemens is currently developing an OTT key tape generator designed by Hüttenhain for the German Government, but for other customers they will order the key tape generators from Hagelin. Alternative generators are currently being developed at Lorenz, Olivetti and OMI. 1

Hagelin has developed OTT extensions for most of their existing cipher machines. This means that the cipher units of machines such as the C-446, the C-52 and the CX-52 can be removed and replaced by a drop-in OTT mechanism.

Friedman is clearly impressed with the mechanical quality of the OTT assemblies and the relative ease with which they can be installed. He thinks that they could be suitable for NATO countries and their allies. Asking again about Siemens, Hagelin reveals that they have already sold OTT equipment to Yugoslavia and probably also to Egypt and India. It would later turn out that on a recent trip to Yugoslavia, Mr. Nyberg had made a relative large sale for Hagelin as well.
  1. Is is currently unknown what type of key tape generator was being developed by Dr. Hüttenhain (as this is redacted). Apparently neither Hagelin nor Friedman are aware that Willi Reichert is meanwhile developing the only true random generator for OTT production, the so-called 'Würfel' (dice).

Three categories
Something that was completely new to Friedman and that he had not heard from Hagelin in any of his earlier conversations or letters, was the fact that Crypto AG now produces three different versions of each of their machines. Hagelin himself had initially thought that two categories would have been sufficient, but after talking with NATO people, Nyberg and Stürzinger had decided that three would be better. The three types or categories are:
  • Type I
    Machines for the West or West-oriented countries, including NATO members and NATO-friendly countries. These machines will be the best Crypto AG can produce. They will offer the maximum flexibility with regards to usage, and will have OTT capability where appropriate. These machines will also be properly shielded against unwanted radiation (TEMPEST) and will be supplied with instructions for proper usage.

  • Type II
    Machines for the friendly neutral countries. These machines are not as flexible as the Type I machines. Countries belonging to this category have not yet been determined, but Findland is suggested as a possibility.

  • Type III
    These machines offer the lowest quality and flexibility. They will have a simpler keying mechanism and can not be equipped with an OTT option. Countries of doubtful orientation or countries leaning towards the USSR fall into this category. This includes Indonesia, India, Egypt and all Near East countries.

The brochures, instruction manuals and manuals for proper usage will be different for each category and will have 'secret marks' to make them distinguishable. According to Hagelin it will be difficult, but necessary, to maintain records of what version each country is using.
The pocket devices
The pocket cipher devices, that Hagelin had talked about on their previous meeting in 1955, are now ready and in production. There appear to be two different versions, the CD-55 and CD-57, that are cosmetically identical, in other words: the average user will not be able to tell them apart.
The CD-55 will be available to all customers in all countries, and will be housed in a green case. It's operation is similar to that of the C-38, the C-446 and the M-209 and the machine will therefore be easy to break or solve by the NSA.

The second variant is the CD-57 that is built around the new keying mechanism, similar to the one used in the CX-52, although from the outside this is not visible. In addition, the CD-57 can be converted into an OTT machine quite easily, by removing the keying mechanism and replacing it with a drop-in OTT assembly.
Pocket Cipher Device CD-57

The CD-57 is housed in a grey case 1 and will only be sold to NATO and NATO-friendly countries. Although it was intially planned to have a small built-in printer, this was dropped in the final version. Instead, the operator now reads the output from an revolving alphabet disc at the front. Furthermore, the cipher discs are now made of aluminium rather than plastic. According to Boris Hagelin Sr., the small CD machine will be suitable for secret agencies and small army units.
  1. According to Hagelin, the CD-55 is housed in a green case, whilst the CD-57 is grey. He probably refers to the colour of the Hamerite paint here. For NATO, the CD-57 was also avaialable in NATO olive green.

Willi Reichert
Before Friedman arrived in Zug, he had made a brief stop in Frankfurt where he was brought up to speed by his colleagues at NSAEUR and ASAE. On this occasion they informed him about a certain Willi Reichert, who is selling surplus WWII Siemens Geheimschreiber machines (also known as T-52, Tunny and Sturgeon) to the French. He asks Hagelin whether he knows Willi Reichert.

Hagelin says that he doesn't know him personally, but that he doesn't think very high of him as, according to him, he sells to both sides. Hagelin thinks that Reichert has some kind of 'secret cache' from which he gets the old machines and parts, but that his supply is about to run out.

It is unknown why the NSA was interested in Willi Reichert, but it must have been around this time, that Reichert had obtained a patent for a noise generator, from Dr. Werner Liebknecht at Lorenz. He was now using this to build a true random number generator for the creation of OTT tapes for the German Government in Bonn. Reichert built a successful business from this and would later move his company to neutral Austria, where it still exists today as Mils Electronic.
Siemens engineers have recently discovered that radiation from a cipher machine (both acoustic and electromagnetic) can lead to unwanted leaking of information. In some cases it had turned out to be possible to recover most of the plaintext from an intercepted signal, in particular when using landlines for transmission. During his short stay in Frankfurt, Friedman had been informed about this and he is now trying to find out how much Hagelin knows about this subject.

Hagelin seems to be well-informed as he tells Friedman pretty much the same as what he had learned in Frankfurt. Like Siemens, Hagelin is now taking the necessary precautions to shield his machines against such radiation. According the Hagelin, the French are also aware of this problem, but do not take it very seriously. For Friedman this confirms the French situation. 1

Although Friedman acts as if this whole radiation issue is new, he must have been familiar with it, as this effect had been known at the NSA for quite some time, and has certainly been exploited by them. Unintended leaking of information, or unwanted emanations, is known as TEMPEST.
  1. For a number of years, high-level NATO information has been leaking to the USSR (Russia) due to insufficient cipher security by the French (see also above).

Visit to France
Whilst Friedman is his house guest, Hagelin has to leave him for a couple of days for a scheduled meeting with the French Interdepartmental Committee on Cryptography in Paris. On his return, sooner than expected, he gives Friedman an account of his business with the French Government and tells him that he has just got an order for about US$ 250,000 for CX and TC machines. The machine were intended for use by the French Army, the Air Force and the Foreign Office.

Whilst in Paris, he briefly discussed his Gentleman's Agreement with the French, who told him that they too would be very happy if he would refrain from selling certain machines to certain countries, but that they had no legal means of forcing him to do so. Despite this, they give him substantial orders for equipment, not just one or two as does the US, Hagelin jokingly adds.
The aftermath   1958-1993
In the following years, Friedman's health deteriorates and he is in and out of the hospital. As a result, he will not be able to visit Hagelin in Europe in the foreseable future and does most of his work from the study in his home. Financial (tax) issues prevent him from travelling on his own expense and the agency wouldn't permit him to visit Hagelin anyway, he writes in 1961.

In 1962, Friedman picks up a consultancy job at RCA and begins thinking about leaving his collection to some organisation. After Princeton University turns down his offering, he decides to come over to Zug (Switzerland) and work with Boris Hagelin on writing the latter's biography. He even contemplates moving to Europe permanently, but this never happens. He loves the US more.

On his return to the US, Friedman will work out the notes and tape transcripts of Hagelin's biography, but recurring health problems prevent him from doing so. In spring 1966, Hagelin's wife Annie doesn't feel well and after a short illness she dies on 29 November 1966, just after she and Boris had moved into their new appartment in Minusio (Switzerland) a month earlier.

In 1967, Friedman has found the Marshall Foundation willing to accept The Friedman Collection and look after it. In September 1967, Elizabeth Friedman writes that Bill now has dayly visits from a typist of the foundation, who is taking down his oral history. Bill is too weak to write or type himself but he is feeling better now. She also writes that Bo is having troubles with his wife Edith, and that Bill is being plagued by newly released books from David Kahn and Farago. Apparently both men have approached Friedman several times and he has difficulty fighting them off.

In May 1968, Hagelin plans a trip to the US and is invited to Friedman's home again. He wants to talk about the activities in Zug and about new technologies, such as integrated circuits that they are now beginning to use in their devices. Unfortunately, on his arrival on 8 October, Friedman has just had another heart attack, so they have to meet in the hospital in Washington.

Over the past 10 years, the relationship between Boris and his son Bo has not been too well, to put it mildly. Although they do write to each other occasionally, and no longer fight over the CD-57 patent issue, they each do their business in their own part of the hemisphere. Friedman on the other hand, has built quite a good relationship with Bo in recent years and sees him regularly.

In March 1969, Friedman's health has improved to the point were he writes a long letter to Hagelin in which he comments that Bo mentioned recently that he hadn't seen his father in the past 5 or 6 years, whilst he (Bill) had seen him at least three times in the recent past. He hopes the two will see each other again soon and spend some time together. A month later, he returns the hand-written biography of Hagelin to Zug, as he has no energy left to finish it. He hopes Boris will find a good biographer to complete it. In November 1969, Friedman dies at the age of 78.

Sadly Bo dies the next year in a fatal car accident and soon after that, Boris Sr. resigns from the board of Crypto AG and finishes his memoirs a few years later in 1979, first in German [2] and then in 1981 translated into English [3]. By the time he dies on 7 September 1983, at the age of 91, he leaves a healty company with customers in over 130 countries. He leaves us a legacy of beautifully crafted mechanical cipher machines, but he also leaves Crypto AG with his past.
Der Fall Hans Bühler   1992
In 1992, Hans Bühler, a top sales representative of Crypto AG is arrested in Iran on the suspicion that the Hagelin cipher machines used by the Iranian Government are flawed, or in more popular terminology: that they contain a backdoor. A loose remark of US President Ronald Reagan about evidence against Libya had led them to believe that Crypto AG was cooperating with the US.
Bühler, who is fully unaware of any manipulation with the machines, is interrogated three times a day for nine months and is finally released in 1993, after the bail of US$ 1,000,000 is payed by Crypto AG. This incident is certainly not the finest period in the history of Crypto AG.

Immediately after Bühler's release from prison and his subsequent return to Switzerland, he is fired and, in addition to that, the company also wishes him to repay the US$ 1,000,000. Bühler then decides to go public and confines his story to a book that is published in 1994 [22].
Cover of the book 'Verschlüsselt, Der Fall Hans Bühler'

The Swiss Federal Police, the Bundesanwaltschaft, has investigated the matter and questioned several people, and it is said that no irrefutable evidence against Crypto AG was ever found. The outcome of the investigation however, remains classified to this day and repeated requests from journalists for public disclosure of the results of the investigation have been denied so far.

Since Hans Bühler went public, some of his former colleagues have decided to come out as well. Former software engineer Jürg Spörndli confirms that the company was visited frequenty by NSA specialists and that on several occasions he was instructed by his manager to swap a crypto­graphic algorithm that he had developed, for an alternative one that was clearly weaker [23].

In 2008, Crypto Museum had the priviledge to have a private talk with Oskar Stürzinger, former chief engineer at Crypto AG and first employee of Boris Hagelin when he established his company in Switzerland [24]. When asked about the case of Hans Bühler, he confirmed that the company had frequent visits from NSA people who had meetings with software engineers and that on some occasions he wasn't even allowed to be present in the room. He said it made him feel uneasy.

Stürzinger also confirmed that since the Bühler case had become known, there have been governmental investigations. As a result, the current management of Crypto AG had taken the necessary measures to ensure that this should never happen again. He was confident about that.
From the evidence found in the documents from the Friedman Archives [1], that were (partly) released by the NSA in 2014, it has become certain that some kind of agreement existed between the NSA and Hagelin as early as 1951 and that this agreement was reviewed and/or renewed several times, in any case in 1955 and in 1957. This agreement was never confined to paper and did not have a termination date, and it is likely that it continued after Hagelin's death in 1983.

In closing, we feel that we should say a few words in Hagelin's defense. Given the fact that he had a very good relationship with the Americans, and in particular with Bill Friedman, and that they brought him his initial fortune by allowing him to supply cipher machines to the US Army during WWII, it seems only natural that he remained loyal to his old friends. From the correspondence between him and Friedman, we get the impression that he was a man of his word, and that he did what he did with the best intentions with respect to safety in Europe and in the rest of the world.

For Crypto AG, the legacy of Boris Hagelin has two faces, one of which is an uncomfortable one. Over the years, Hagelin has created beautiful ingenious masterpieces of mechanical, electrical and electronic engineering. And he has built a large company with a strong customer base on it. On the other hand, Crypto AG has to deal with its past, first when Hans Bühler's case emerged, and now in the light of the above revelations. It should be understood that this is not easy.

The above story is the result of extensive research in the Friedman Collection of Official Papers by the British Broadcasting Corporation (BBC) and Crypto Museum in July 2015. It was the subject of a radio program that was aired on 28 July 2015 on BBC Radio 4 [25]. In an official reaction to the BBC, Crypto AG said that, whatever happened in the past, this is certainly not happening today, and that mechanisms have been put in place, to prevent this from happening in the future.

In this light, we should warn the reader, that the information above is based on documents that were released by an intelligence agency. Although we have no doubts as to the authenticity of the documents, you should be aware of the manipulative nature of such agencies. We do not know the full story yet and by releasing only part of the information, it is entirely possible that the NSA deliberately tries to damage an existing successful company. Please consider this for a moment.
  • Boris Hagelin Sr.
    Founder and initial owner of Crypto AG.

  • Boris (Bo) Hagelin Jr.
    Son of Boris Sr. who was supposed to take over the company in due course. Died in a car accident in 1970.

  • William (Bill) Friedman
    Cryptologist during WWII. Worked for AFSA and later for NSA. After his retirement: consultant for the NSA.

  • Oskar Stürzinger
    First employee of Hagelin in 1952 after the company had moved to Zug (Switzerland). Head of developments at Crypto AG. Worked for Gretag before joining Hagelin.

  • Sture Nyberg
    Hagelin's factory manager in the Stockholm factory, later factory manager in Zug.

  • Dr. Erich Hüttenhain
    Former Cryptologist of the Third Reich who later worked for the German Intelligence Service, the Bundesnachrichtendienst (BND).

  • Dr. Rudolf Hell
    Inventor of the Hellschreiber and the fax. Also manfacturer of the H-54 cipher machine under licence from Hagelin. Had an exclusive contact for the supply of these machines with the German Army (Bundeswehr).

AFSA   Armed Forces Security Agency
Predecessor of the NSA (1949-1952).

ASA   Army Security Agency

DIRNSA   Director of the NSA
Common abbreviation for the director of the National Security Agency (NSA), also referred to as Director, NSA.

USCIB   United States Communications Intelligence Board


ASAE   Army Security Agency Europe


  1. Declassified by NSA on 17 June 2014 (EO 13526).

  1. NSA, William F. Friedman Collection of Official Papers
    Retrieved July 2015.

  2. Boris Hagelin, Die Geschichte der Hagelin-Cryptos
    Original manuscript by Boris Hagelin in German language. Zug, Fall 1979.

  3. Boris Hagelin, The Story of Hagelin Cryptos
    English translation of the above. BCW Hagelin, Zug, Spring 1981. Later edited by David Kahn and published in Cryptologia, Volume 18, Issue 3, July 1994, pp 204-242.

  4. Collection of M-209 patent and license agreements
    A66684. Declassified by NSA on 11 June 2014 (EO 13526).

  5. Boris Hagelin, Personal letter to William Friedman, 2 November 1947
    A2263076. Declassified by NSA on 30 July 2014 (EO 13526).

  6. William Friedman, Personal letter to Boris Hagelin, 8 November 1947
    A2263080. Declassified by NSA on 30 July 2014 (EO 13526).

  7. Boris Hagelin, Personal letter to William Friedman, 24 November 1947
    A2263085. Declassified by NSA on 30 July 2014 (EO 13526).

  8. Boris Hagelin, Personal letter to William Friedman, 13 December 1947
    A2263092. Declassified by NSA on 30 July 2014 (EO 13526).

  9. Boris Hagelin, Personal letter to William Friedman, 15 December 1947
    A2263095. Declassified by NSA on 30 July 2014 (EO 13526).

  10. William Friedman, Personal letter to Boris Hagelin, 21 December 1947
    A2263097. Declassified by NSA on 30 July 2014 (EO 13526).

  11. Boris Hagelin, Personal letter to William Friedman, 9 August 1950
    A58956. Declassified by NSA on 14 July 2014 (EO 13526).

  12. Boris Hagelin, Post-War development work on ciphering devices by Boris Hagelin
    26 January 1951. A72379. Declassified by NSA on 8 July 2014 (EO 13526).

  13. Release of Hagelin US Patent Application 188,546
    27 March 1952. A66665. Declassified by NSA on 10 June 2014 (EO 13526).

  14. William Friedman, Negotiations with Mr. Hagelin
    22 May 1951. Includes full report about AB Cryptoteknik, Stockholm, Sweden. A60611. Partly declassified by NSA on 6 November 2014 (EO 13526).

  15. James H. Douglas, Release of the M-209 to Foreign Nations
    Memorandum for the record, 15 October 1953.
    A66649. Declassified by NSA on 23 January 2015 (EO 13526).

  16. Thomas M. larner, Converters, M209
    Memorandum for Director, National Security Agency. 15 December 1953.
    A66618. Declassified by NSA on 11 June 2014 (EO 13526).

  17. Ralph J. Canine, Release of M-209's to the French
    12 January 1954. A66647. Declassified by NSA on 10 June 2014 (EO 13526).

  18. William Friedman, Report of Visit to Crypto AG (Hagelin) 21-28 February 1955
    15 March 1955. TOP SECRET. Draft version with hand-written changes.
    A2436259. Partly declassified by NSA on 22 July 2014 (EO 13526).

  19. William Friedman, Report of Visit to Crypto AG (Hagelin) 21-28 February 1955
    28 March 1955. TOP SECRET. Final version.
    A2436243. Partly declassified by NSA on 22 July 2014 (EO 13526).

  20. William Friedman, Report of Visit to Crypto AG (Hagelin) 21-28 February 1955
    28 March 1955. TOP SECRET. Adapted final version.
    A60616. Partly declassified by NSA on 20 June 2014 (EO 13526).

  21. Captain I. T. McDonald, USAF, 16 June Comments of Mr. Friedman
    Memorandum for Colonel Davis, 17 June 1955.
    A62443. Declassified by NSA on 17 June 2014 (EO 13526).

  22. Res Strehle, Verschlüsselt, Der Fall Hans Bühler
    Switzerland, 1994. ISBN 3-85932-141-2.

  23. Line Dugstad & Osman Kibar, Den skjulte partneren
    Dagens Næringsliv. Website. 2 january 2015 (updated 13 February 2015).

  24. Oskar Stürzinger, Interview with Crypto Museum
    Basel, 7 November 2008.

  25. BBC Radio 4, Document - The Crypto Agreement
    Evidence of a secret deal between Crypto AG (Hagelin) and the NSA.
    28 July 2015, broadcast, presented by Gordon Corera.

Further information

Any links shown in red are currently unavailable. If you like the information on this website, why not make a donation?
© Crypto Museum. Created: Thursday 30 July 2015. Last changed: Thursday, 13 October 2016 - 07:15 CET.
Click for homepage