Incenser, or how NSA and GCHQ are tapping internet cables (2014)
<i>&quot;It&#x27;s not just a US problem. The UK has a huge dog in this fight,&quot; Snowden told the Guardian. &quot;They [GCHQ] are worse than the US.&quot;</i><p>I&#x27;m not sure if I&#x27;ve got the picture right. Someone more informed than I please help.<p>First, let us set the scene with a precedent - the famous WWI Zimmermann Telegram of 1917 where Germany and Mexico were concocting a secret deal that wasn&#x27;t in the interests of the US or UK which was tapped and successfully intercepted:   
<a href="https:&#x2F;&#x2F;en.m.wikipedia.org&#x2F;wiki&#x2F;Zimmermann_Telegram" rel="nofollow">https:&#x2F;&#x2F;en.m.wikipedia.org&#x2F;wiki&#x2F;Zimmermann_Telegram</a>.<p>I only mention this 100-year-plus case as it&#x27;d be at the forefront of any planning for any undersea cable, transatlantic otherwise to see such incidents are not repeated.  OK, so where are my assumptions wrong here?<p>1. Cable operator of say US-UK link doesn&#x27;t want a tap put on cable in mid Atlantic by a third country so takes the necessary steps by encrypting all its data.<p>2. Cable operator knows both US&#x2F;NSA and UK&#x2F;GCHQ will want to tap cable at their respective ends (i. e.: on land). No problem, as the cable operator has no say in the matter anyway.<p>3. To stop undersea tapping by third party, cable is encrypted at cable stations at either end. Multiple levels of encryption are employed: fibers are encrypted either individually or collectively so only a raw encrypted datastream appears on the undersea section of circuit; that is, the only discernible IP address information on the cables is that necessary for the cable stations at either end to TX&#x2F;RX data across the Atlantic. Thus an attack in the middle won&#x27;t reveal who is using the cables nor their IP addresses (as they too will be encrypted as part of the overall encrypted datasteam).<p>4. Third-party counties, for argument sake, say Mexico and Germany that are also using the cable will similarly encrypt and obfuscate the source and destination IP addresses of all their users in a similar manner using an all-encompassing encrypted datastream. So effectively the NSA and GCHQ can only inspect their own local traffic, which they do on land at their respective cable stations <i>after</i> the undersea section of the link has been decrypted.<p>5. As, we&#x27;ve made Mexico and Germany the adversaries, we can expect them to not only encrypt data and obfuscate source and destination IP addresses of their users by multiplexing all data into a common encrypted datastream but also obfuscate the amount of traffic they&#x27;re sending. They will likely achieve this obfuscation by using say an encrypted token ring&#x2F;FDDI-like system, then the datastream would appear to be a constant quantity irrespective of the actual circuit load.<p>6. In essence, why do countries still try to tap undersea cables with submarine taps when they&#x27;d only pick up encrypted &#x27;garbage&#x27;?  Alternatively, why do cable users leave themselves vulnerable to tapping when they could employ methods to obfuscate not only their data but also how they are loading (using) said cables?<p>Right, I&#x27;ve greatly oversimplified the issue but the gist of my point is there.