# What is a secure line?

**URL:** <https://boards.straightdope.com/t/what-is-a-secure-line/787535>\
**Category:** Factual Questions\
**Created:** [May 27, 2017, 1:46pm UTC](https://boards.straightdope.com/t/what-is-a-secure-line/787535 "2017-05-27T13:46:29Z")\
**Posts on this page:** 20\
**Page:** 1

<div class="post-metadata">

**Author:** ![BobLibDem](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/boblibdem/32/3149_2.png) [@BobLibDem](https://boards.straightdope.com/u/BobLibDem)\
**Post date:** [May 27, 2017, 1:46pm UTC](https://boards.straightdope.com/t/what-is-a-secure-line/787535/1 "2017-05-27T13:46:29Z")

</div>

All this talk about Jared Kushner wanting to utilize a secure line inside Russian facilities to talk to the Kremlin without US intelligence catching on got me to wondering, exactly what is a secure line? I assume it isn’t a line at all, but rather an encryption of some sort where even if you managed to tap into it, it would be unintelligible without the proper de-encryption device. But I could be wrong, maybe there really is a physical line between Moscow and Washington that is impervious to tapping. In any event, the reason that we know about this is because the US intercepted a communication, so maybe it’s not so secure after all. So what’s the story- how does sensitive communication take place securely? Or is none of it truly secure?

---

<div class="post-metadata">

**Author:** ![Evan\_Drake](https://avatars.discourse-cdn.com/v4/letter/e/b487fb/32.png) [@Evan\_Drake](https://boards.straightdope.com/u/Evan_Drake)\
**Post date:** [May 27, 2017, 2:14pm UTC](https://boards.straightdope.com/t/what-is-a-secure-line/787535/2 "2017-05-27T14:14:34Z")

</div>

\*The secure line’s earliest days can be traced back to the development of a machine called SIGSALY at Bell Telephone Laboratories during World War II. It was meant to replace the seemingly scrambled, high-frequency radio communication then–employed by the Allies – which, it turned out, eavesdropping Axis forces had already managed to decrypt.

So what was SIGSALY? “Consisting of 40 racks of equipment, it weighed over 50 tons, and featured two turntables which were synchronized on both the sending and the receiving end by an agreed upon timing signal from the U.S. Naval Observatory,” according to the National Security Agency’s historical account of the device.

The two turntables played identical copies of randomly generated noise that was mixed into a call. “One would mix in noise, and the other would basically subtract out that noise. And anybody listening would just hear noise,” explained Matthew Green, an assistant research professor at the Johns Hopkins Information Security Institute. “But somebody who subtracted out the noise would hear the phone call.”\*

**[Tested — What Is A Secure Line ?](http://www.tested.com/tech/concepts/460683-tested-explains-what-does-it-mean-call-secure-line/)**  
Along with photos of Obama and the Elder Bush making phone calls.

To be fair, Hillary for one, thought it more trouble than it was worth:  
_“I give up. Call me on my home [number],” Clinton told then-chief of staff Cheryl Mills in a February 2009 email after more than an hour of trouble trying to communicate via a secure line.  
“I just spoke to ops and called you reg line — we have to wait until we see each other b/c [the] technology is not working,” Mills said in another email sent at almost exactly the same time.  
“Pls try again,” responded Clinton, a few moments later._

**[The Hill](http://thehill.com/policy/national-security/279764-email-clinton-abandoned-secure-line-to-use-home-phone)**  
I’m not sure if she was wrong. Security can be fetishized. Following the **[advice](https://www.schneier.com/blog/archives/2008/01/my_open_wireles.html)** of the redoubtable Bruce Schneier, I’ve just disabled security in my WiFi router, because it might help someone and there’s not much that can attack my meagre little ASDL.

---

<div class="post-metadata">

**Author:** ![Evan\_Drake](https://avatars.discourse-cdn.com/v4/letter/e/b487fb/32.png) [@Evan\_Drake](https://boards.straightdope.com/u/Evan_Drake)\
**Post date:** [May 27, 2017, 2:19pm UTC](https://boards.straightdope.com/t/what-is-a-secure-line/787535/3 "2017-05-27T14:19:10Z")

</div>

Just to add, I doubt if anyone of interest to American Intelligence could possibly escape their relentless and persistent surveillance; and that includes Trump, Obama, and anyone wandering along the line of fire. Trying to evade it would only make them all excited.

---

<div class="post-metadata">

**Author:** ![igor\_frankensteen](https://avatars.discourse-cdn.com/v4/letter/i/839c29/32.png) [@igor\_frankensteen](https://boards.straightdope.com/u/igor_frankensteen)\
**Post date:** [May 27, 2017, 2:26pm UTC](https://boards.straightdope.com/t/what-is-a-secure-line/787535/4 "2017-05-27T14:26:41Z")

</div>

The thing to realize with this particular thing, is that “secure line” is a CONCEPT, not an actual specific OBJECT.

Most of the “security” here was based on DIRECT HUMAN CONTACT, not on devices so much. All security, after all, depends on the PEOPLE USING IT to pay attention to the necessary details, far more than it depends on mechanisms or encryptions.

---

<div class="post-metadata">

**Author:** ![coremelt](https://avatars.discourse-cdn.com/v4/letter/c/4491bb/32.png) [@coremelt](https://boards.straightdope.com/u/coremelt)\
**Post date:** [May 27, 2017, 3:46pm UTC](https://boards.straightdope.com/t/what-is-a-secure-line/787535/5 "2017-05-27T15:46:31Z")

</div>

If the whole thing with Kushner trying to set up a “secure line” by asking the Russians for one is true then it displays a laughably incompetent degree of lack of knowledge of encryption.

You want a secure line to anyone? Sign up for a bunch of different vpn companies and then use signal to communicate. Alternate between different vpn companies for each message you send to make it harder for someone to do traffic analysis. Signal client and server are both open source so people can verify it really is strong encryption without backdoors.

Theres also protonmail which is based in switzerland (so out of reach of NSA letters) and uses strong encryption on all messages such that even their own staff can’t even decrypt your mailbox. Also, If you forget your mailbox decrypt password with protonmail it cannot be recovered, you lose access to that mailbox and have to make a new one.

State level actors might be able to get around the above by using firmware hacks or other zero day exploits to install a logger on your phone or computer, but it’s still a hell of a lot more secure than having to send someone to a known russian diplomatic compound to send a message.

---

<div class="post-metadata">

**Author:** ![Chronos](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/chronos/32/134_2.png) [@Chronos](https://boards.straightdope.com/u/Chronos)\
**Post date:** [May 27, 2017, 4:58pm UTC](https://boards.straightdope.com/t/what-is-a-secure-line/787535/6 "2017-05-27T16:58:03Z")

</div>

That depends on what sort of security you want. Do you just want it to be impossible for others to intercept your communications, or do you want it to be impossible to tell that you’re communicating at all?

---

<div class="post-metadata">

**Author:** ![Evan\_Drake](https://avatars.discourse-cdn.com/v4/letter/e/b487fb/32.png) [@Evan\_Drake](https://boards.straightdope.com/u/Evan_Drake)\
**Post date:** [May 27, 2017, 5:06pm UTC](https://boards.straightdope.com/t/what-is-a-secure-line/787535/7 "2017-05-27T17:06:11Z")

</div>

> [@coremelt](#):
>
> Theres also protonmail which is based in switzerland (so out of reach of NSA letters) and uses strong encryption on all messages such that even their own staff can’t even decrypt your mailbox. Also, If you forget your mailbox decrypt password with protonmail it cannot be recovered, you lose access to that mailbox and have to make a new one.

I use **[Tutanota.de](https://tutanota.com/)**.

---

<div class="post-metadata">

**Author:** ![BobLibDem](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/boblibdem/32/3149_2.png) [@BobLibDem](https://boards.straightdope.com/u/BobLibDem)\
**Post date:** [May 27, 2017, 6:00pm UTC](https://boards.straightdope.com/t/what-is-a-secure-line/787535/8 "2017-05-27T18:00:10Z")

</div>

Is it true that written communication is more secure than verbal? Are attachments secure? Say I put the nuclear codes in a Word document and password protect it. Can the enemy get into it without knowing the password?

---

<div class="post-metadata">

**Author:** ![Evan\_Drake](https://avatars.discourse-cdn.com/v4/letter/e/b487fb/32.png) [@Evan\_Drake](https://boards.straightdope.com/u/Evan_Drake)\
**Post date:** [May 27, 2017, 6:30pm UTC](https://boards.straightdope.com/t/what-is-a-secure-line/787535/9 "2017-05-27T18:30:31Z")

</div>

With Microsoft’s legendary approach to security there are any number of ways to break a Word password; however even if it were almost uncrackable — as nothing is — and even if it applied to any other document format, this would still be a phenomenally unwise idea.

The mere fact they _have_ the document tells them that with world enough and time they can open it. At least voice communication unrecorded is transitory.

---

<div class="post-metadata">

**Author:** ![Saintly\_Loser](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/saintly_loser/32/4045_2.png) [@Saintly\_Loser](https://boards.straightdope.com/u/Saintly_Loser)\
**Post date:** [May 27, 2017, 9:50pm UTC](https://boards.straightdope.com/t/what-is-a-secure-line/787535/10 "2017-05-27T21:50:07Z")

</div>

> [@BobLibDem](#):
>
> Is it true that written communication is more secure than verbal? Are attachments secure? Say I put the nuclear codes in a Word document and password protect it. Can the enemy get into it without knowing the password?

A password-protected Word document?

I can open those in literally two minutes. I do it just about every day at work for lawyers who have password-protected their documents and then forgotten their passwords.

I hope government officials are doing better than that.

Sent from my Nexus 5 using Tapatalk

---

<div class="post-metadata">

**Author:** ![Derleth](https://avatars.discourse-cdn.com/v4/letter/d/b9e5f3/32.png) [@Derleth](https://boards.straightdope.com/u/Derleth)\
**Post date:** [May 27, 2017, 10:06pm UTC](https://boards.straightdope.com/t/what-is-a-secure-line/787535/11 "2017-05-27T22:06:44Z")

</div>

> [@Evan\_Drake](#):
>
> With Microsoft’s legendary approach to security there are any number of ways to break a Word password; however even if it were almost uncrackable — as nothing is — and even if it applied to any other document format, this would still be a phenomenally unwise idea.
> 
> The mere fact they _have_ the document tells them that with world enough and time they can open it. At least voice communication unrecorded is transitory.

[There isn’t world enough, _or_ time](https://security.stackexchange.com/questions/6141/amount-of-simple-operations-that-is-safely-out-of-reach-for-all-humanity/6149#6149) if the algorithm’s good.

[More](http://www.eetimes.com/document.asp?doc_id=1279619)

> [@](#):
>
> As shown above, even with a supercomputer, it would take 1 billion billion years to crack the 128-bit AES key using brute force attack. This is more than the age of the universe (13.75 billion years). If one were to assume that a computing system existed that could recover a DES key in a second, it would still take that same machine approximately 149 trillion years to crack a 128-bit AES key.

And further note, quantum cryptography isn’t magical:

> [@](#):
>
> A note on quantum computers: a QC can do quite a lot in a single “operation”. The usual presentation is that the QC performs “several computations simultaneously, which we filter out at the end”. This assertion is wrong in many particulars, but it still contain a bit of truth: a QC should be able to attack n-bit symmetric cryptography (e.g. symmetric encryption with a n-bit key) in 2[sup]n/2[/sup elementary quantum operations. Hence the classic trick: to account for quantum computers (if they ever exist), double the key length. Hence AES with a 256-bit key, SHA-512… (the 256-bit key of AES was not designed to protect against hypothetical quantum computers, but that’s how 256-bit keys get justified nowadays).

---

<div class="post-metadata">

**Author:** ![alphaboi867](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/alphaboi867/32/3898_2.png) [@alphaboi867](https://boards.straightdope.com/u/alphaboi867)\
**Post date:** [May 28, 2017, 12:10am UTC](https://boards.straightdope.com/t/what-is-a-secure-line/787535/12 "2017-05-28T00:10:50Z")

</div>

The irony is that “secure line” Kushner wanted to use to avoid monitoring by the NSA/CIA/etc would seem to the same system the Russian Ambassador used to report their conversation to Moscow. Granted it’s also possible that the Russians do actually have a more secure communication system, and deliberately communicated this on a system they knew was being monitored .

Sent from my SM-G950U using Tapatalk

---

<div class="post-metadata">

**Author:** ![rbroome](https://avatars.discourse-cdn.com/v4/letter/r/838e76/32.png) [@rbroome](https://boards.straightdope.com/u/rbroome)\
**Post date:** [May 28, 2017, 12:48am UTC](https://boards.straightdope.com/t/what-is-a-secure-line/787535/13 "2017-05-28T00:48:33Z")

</div>

A “secure line” typically has meant a STU-III desk set.

See: [Secure telephone - Wikipedia](https://en.wikipedia.org/wiki/Secure_telephone)

According to Wiki, it has been replaced by a better system. According to the above post about Clinton, better is a relative term.

---

<div class="post-metadata">

**Author:** ![griffin1977](https://avatars.discourse-cdn.com/v4/letter/g/977dab/32.png) [@griffin1977](https://boards.straightdope.com/u/griffin1977)\
**Post date:** [May 28, 2017, 2:27am UTC](https://boards.straightdope.com/t/what-is-a-secure-line/787535/14 "2017-05-28T02:27:28Z")

</div>

Actual secure lines (like the Moscow-Washington hotline) use[one-time pad encryption](https://en.wikipedia.org/wiki/One-time_pad). This is mathematically guaranteed to be unbreakable (unless you have the key), but requires a key as long as the message itself. Because of this it is only really feasible for very important, but rarely used communication channels.

There is similarly secure means of communicating available in the Russian embassy, this is what Kushner was suggesting to use (which is espionage, plain and simple IMO)

> [@](#):
>
> Current and former U.S. intelligence officials said that although Russian diplomats have secure means of communicating with Moscow, Kushner’s apparent request for access to such channels was extraordinary.

---

<div class="post-metadata">

**Author:** ![Evan\_Drake](https://avatars.discourse-cdn.com/v4/letter/e/b487fb/32.png) [@Evan\_Drake](https://boards.straightdope.com/u/Evan_Drake)\
**Post date:** [May 28, 2017, 2:33am UTC](https://boards.straightdope.com/t/what-is-a-secure-line/787535/15 "2017-05-28T02:33:24Z")

</div>

How is it espionage to use a secure means of communication ? Are you suggesting he was giving the Russians secrets ?

---

<div class="post-metadata">

**Author:** ![griffin1977](https://avatars.discourse-cdn.com/v4/letter/g/977dab/32.png) [@griffin1977](https://boards.straightdope.com/u/griffin1977)\
**Post date:** [May 28, 2017, 2:52am UTC](https://boards.straightdope.com/t/what-is-a-secure-line/787535/16 "2017-05-28T02:52:41Z")

</div>

> [@Evan\_Drake](#):
>
> How is it espionage to use a secure means of communication ? Are you suggesting he was giving the Russians secrets ?

To use another country’s secure means of communication? A means of communication that exists solely for that county’s agents in the US to be able to communicate to their superiors without detection by the US intelligence agencies.

There is exactly one reason why anyone in the US would request to use such a means of communication, and that reason is some kind of espionage. If member of the US intelligent services was caught doing so, that alone would be enough for them to face prosecution for espionage.

That said, this is a side track from the OP.

---

<div class="post-metadata">

**Author:** ![Bear\_Nenno](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/bear_nenno/32/3358_2.png) [@Bear\_Nenno](https://boards.straightdope.com/u/Bear_Nenno)\
**Post date:** [May 28, 2017, 3:04am UTC](https://boards.straightdope.com/t/what-is-a-secure-line/787535/17 "2017-05-28T03:04:13Z")

</div>

When I think of secure lines, I am thinking about actual separate lines, not just secured or encrypted terminals. Computers and phones used to process classified material are connected to a completely different internet. The Ethernet cables and junction boxes for these machines are physically secured and locked. The routing of these cables from terminal device all the way to the satellite dish are protected. I’m not an expert on the technology and hardware involved, by any means. But when I need to use a secured telephone line, it’s going to be some type of VOIP, and it’s physically a different “line” (even color-coded to distinguish it) than the unsecured VOIP system. It’s not just different hardware and encryption on each end. The cables and network are different and separate. When working with ISAF, we usually had three systems and three separate lines. There was the unsecured [NIPR](https://en.wikipedia.org/wiki/NIPRNet) line, the [SIPR](https://en.wikipedia.org/wiki/SIPRNet) (secured, classified, US-Only) line, and the [CENTRIXS](https://en.wikipedia.org/wiki/CENTRIXS) (secured Shared NATO) line. A person cannot access one network from the other. They’re independent of each other. So, in my experience, a “secured line” is more than a concept. It is, in fact, a physical thing.

---

<div class="post-metadata">

**Author:** ![Derleth](https://avatars.discourse-cdn.com/v4/letter/d/b9e5f3/32.png) [@Derleth](https://boards.straightdope.com/u/Derleth)\
**Post date:** [May 28, 2017, 3:08am UTC](https://boards.straightdope.com/t/what-is-a-secure-line/787535/18 "2017-05-28T03:08:46Z")

</div>

> [@Bear\_Nenno](#):
>
> When I think of secure lines, I am thinking about actual separate lines, not just secured or encrypted terminals.

Physical separation isn’t sufficient for secure communications, given that your threat model includes people with physical access to at least routers and cables, such that you have to assume they can install undetectable network hubs to tap communications and record everything which passes through a line to high-capacity storage media, like, say, a few MicroSD cards they bought at Target on their way to work.

---

<div class="post-metadata">

**Author:** ![Bear\_Nenno](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/bear_nenno/32/3358_2.png) [@Bear\_Nenno](https://boards.straightdope.com/u/Bear_Nenno)\
**Post date:** [May 28, 2017, 3:24am UTC](https://boards.straightdope.com/t/what-is-a-secure-line/787535/19 "2017-05-28T03:24:18Z")

</div>

> [@Derleth](#):
>
> Physical separation isn’t sufficient for secure communications, given that your threat model includes people with physical access to at least routers and cables, such that you have to assume they can install undetectable network hubs to tap communications and record everything which passes through a line to high-capacity storage media, like, say, a few MicroSD cards they bought at Target on their way to work.

I didn’t mean to imply that physical separation was the _only_ method of security. The information is encrypted, of course. I just meant that the systems are _also_ separate, in addition to all of the hardware and software based encryption behind every message.

---

<div class="post-metadata">

**Author:** ![Evan\_Drake](https://avatars.discourse-cdn.com/v4/letter/e/b487fb/32.png) [@Evan\_Drake](https://boards.straightdope.com/u/Evan_Drake)\
**Post date:** [May 28, 2017, 3:27am UTC](https://boards.straightdope.com/t/what-is-a-secure-line/787535/20 "2017-05-28T03:27:15Z")

</div>

> [@griffin1977](#):
>
> To use another country’s secure means of communication? A means of communication that exists solely for that county’s agents in the US to be able to communicate to their superiors without detection by the US intelligence agencies.
> 
> There is exactly one reason why anyone in the US would request to use such a means of communication, and that reason is some kind of espionage.

Not really. There are any number of reasons for wanting a secure chat, including business. And prosecution relies on more definition than ‘some kind of espionage’.

> [@](#):
>
> If member of the US intelligent services was caught doing so, that alone would be enough for them to face prosecution for espionage.

Suppose that member was given explicit permission from his immediate superiors or the POTUS ?

[Next page](https://boards.straightdope.com/t/what-is-a-secure-line/787535.md?page=2)
