You have commented 339 times on Rantburg.

Your Name
Your e-mail (optional)
Website (optional)
My Original Nic        Pic-a-Nic        Sorry. Comments have been closed on this article.
Bold Italic Underline Strike Bullet Blockquote Small Big Link Squish Foto Photo
Terror Networks
Mujahedin Secrets
2007-05-30


U.S. Cyber-security specialists have been examining an encryption software package released earlier this month by the Global Islamic Media Front, a Web forum for supporters of Islamic terrorists. The software package, dubbed "Mujahedin Secrets" by its authors, is an executable file that can be installed on removable media, like a thumb drive, and used on computers in libraries other public places to encrypt e-mail or other files being sent over the Internet.

According to iDefense, an Internet security consultancy which is analyzing the program "the program's 'portability' as an application (not requiring installation on a personal computer) will become an increasingly desirable feature, especially considering the high use of Internet cafes worldwide by pro-terrorist Islamic extremists," said iDefense Middle East analyst Andretta Summerville.

"Mujahedin Secrets," which can be downloaded for free, offers "the five best encryption algorithms, with symmetrical encryption keys (256 bit), asymmetrical encryption keys (2048 bit) and data compression," according to a translation of a Global Islamic Media Front's announcement about the software on Jan. 1, provided by Middle East Media Research Institute.

The package does not offer any capabilities not available in commercial encryption programs, according to ZDNet blogger Mitch Ratcliffe. "The difference is an Islamist skin," he wrote, "which seems more a gimmick to inspire confidence in the software than a guarantee it will be effective."


iDefense Director of Threat Intelligence Jim Melnick told UPI that "Mujahedin Secrets" was being "heavily promoted" on forums and other Web sites used by supporters of Islamic terror groups. The program "will make it easier and more comfortable for those Arabic speakers who may have been wary of using English-based encryption programs to use a program developed by 'their own' people," Melnick said.

The package is "likely to reach a broad audience of pro-terrorist supporters online and Arabic-speaking hackers," he said.

Melnick added that "Mujahedin Secrets" included a PDF file of instructions in Arabic, which noted that the developers of the package had been working on the code "for years."

Melnick said another unusual, though not unique feature of the software, in addition to its portability, was that it did not supply so-called "public keys." Keys are the code that allows encryption users to talk to each other. Possessing a key does not allow anyone to decrypt messages sent using it, but does mean the user can set up a secure session with anyone else using the same key.

"Most encryption packages are designed to be interoperable," he said, but this program is not. As a result, users "must get the key to decrypt email (or other files) from the person who sent it or through other private means."
Posted by:3dc

#4  You can probably get their IP addresses no problem.

Al
Posted by: Frozen Al   2007-05-30 17:13  

#3  So, no way to get a record of all people who download this encryption software online?
Posted by: Zenster   2007-05-30 15:19  

#2  Wow! Those geeks at NSA are devious. Also heard every keystroke on Arabic Windows is recorded and sent to Fort Meade.
Posted by: ed   2007-05-30 13:11  

#1  All pre-ordained in the Qur'an (v1.0 build 1038). The key is in the second hadith.
Posted by: Steve White   2007-05-30 12:51  

00:00