Skip Links

Network World

  • Social Web 
  • Email 
  • Close

(Comma separation for multiple addresses)
Your Message:

Al-Qaeda group's encryption software stronger, security firm confirms

Mujahideen Secrets 2 can encrypt chat communications, Secure Computing says.
By Ellen Messmer , Network World , 02/01/2008
  • Share/Email
  • Tweet This
  • Comment
  • Print

Al-Qaeda support group Al-Ekhlaas has improved the encryption software it now provides to its online members, according to one security researcher who examined the software, known as "Mujahideen Secrets 2." 

Mujahideen Secrets 2 has added the ability to encrypt chat communications, which the first version lacked, says Paul Henry, vice president of technology evangelism at Secure Computing. Henry says he got the software through a contact in the intelligence community. The home-grown Mujahideen Secrets 2 encryption software, based on open source RSA code, can encrypt binary files so they can be posted on ASCII-text-based bulletin boards and Web sites.

"They have improved the operation of the graphical user interface and it will now encrypt chat communications," says Henry, who adds that the Arabic translation suggests the software is encouraged for use by Al-Ekhlaas members to evade U.S. government efforts at surveillance.

Tampa-based ISP NOC4Hosts and Rochester, Minn.,-based SiteGenesis in January found out their operations were being used to host the Al-Ekhlaas Web sites where Mujahideen Secrets 2 can be found. Both hosting firms pulled the plug on the Web sites after receiving specific technical information about the content.

This week another Web hosting company, CrystalTech Web Hosting in Phoenix, shut down sites linked to the Al Qaeda-link support group.

"As soon as we found out, we brought the IP sites down," says Bob Cichon, president of CrystalTech Web hosting, who blamed a reseller for it happening. "We're a very large host and it's hard to track everything."

In its analysis of Mujahideen Secrets 2, Secure Computing has noticed that the software appears to violate copyright law.

"Typically with open source, they still require a copyright notification," Henry says. "There's no copyright notification whatsoever here."

Another notable thing is that the public-key signature in Mujahideen Secrets 2 leaves a tell-tale sign that the Al-Ekhlaas home-rolled software produced it. The encryption itself is strong at up to a 2,048-bit key length, and like the previous version, provides e-mail and file encryption using public-key certificates.

  • Share/Email
  • Tweet This
  • Comment
  • Print

Comments (8)
Login
Forgot your account info?

RE: Al-Qaeda group's encryption software stronger, security firm confirmsBy Anonymous on February 2, 2008, 11:57 amlol, They sound surprised that Al-Qaeda broke *shudders* Copyright Law...

Reply | Read entire comment

Maybe now the RIAA willBy Anonymous on February 2, 2008, 7:15 pmMaybe now the RIAA will leave 12 year olds downloading mp3 files alone and go after Al-Qaeda No one shuddering - just pointing out the obvious: All kidding...

Reply | Read entire comment

Al-Qaeda Violating Copyright LawBy Brad Reese on February 4, 2008, 6:34 amTo learn that Al-Qaeda violated copyright law is almost as shocking as learning that the Menendez Brothers, after blasting their parents at point blank range with...

Reply | Read entire comment

Wow.... Really.By Anonymous on February 5, 2008, 10:42 amI think they are bit early for April fools.

Reply | Read entire comment

No copyright notification?By Anonymous on February 5, 2008, 10:48 pmNo copyright notification? We've got them now!

Reply | Read entire comment

If it was tax evasion forBy Anonymous on February 8, 2008, 7:59 pmIf it was tax evasion for the mafia, maybe it will be copyright law for Al-Queda

Reply | Read entire comment

View all comments

Add comment
Anonymous comments subject to approval. Register here for member benefits.
Have a NetworkWorld account? Log in here. Register now for a free account.

Videos

rssRss Feed