RSA Security

RSA Security is a prominent American organization specializing in cybersecurity and public-key cryptography. Founded by the cryptographers who invented the RSA (cryptosystem), the company has been a central player in securing digital communications and transactions for decades. Its technologies are foundational to protocols like SSL/TLS and are embedded in countless applications, from web browsers to smart cards. Now operating as a standalone entity under Symphony Technology Group, it continues to provide a suite of security software and services to governments and enterprises worldwide.

History

The company originated from the groundbreaking 1977 paper by Ron Rivest, Adi Shamir, and Len Adleman at the Massachusetts Institute of Technology, which first described the RSA (cryptosystem). It was formally incorporated in 1982 as RSA Data Security, Inc., initially focusing on commercializing the public-key cryptography system. A significant early milestone was its involvement in the Crypto Wars of the 1990s, advocating against U.S. government restrictions on the export of strong cryptography. The company went public and was later acquired by Security Dynamics in 1996, with the combined entity eventually taking the name RSA Security. It became a division of EMC Corporation following a 2006 acquisition, was later bundled into the Dell Technologies portfolio after Dell's purchase of EMC, and was finally sold to the private equity firm Symphony Technology Group in 2020.

Cryptography

The core of the company's legacy is the RSA (cryptosystem), an asymmetric cryptographic algorithm that enables secure data transmission over insecure channels like the Internet. The algorithm's security relies on the computational difficulty of integer factorization, a problem studied since the era of Carl Friedrich Gauss. RSA technology became a de facto standard for enabling digital signatures and key exchange, forming the backbone of the X.509 certificate standard used in Public Key Infrastructure (PKI). The company's researchers have also contributed to other cryptographic standards, including the RC4 stream cipher and the MD5 hash function, though the latter's vulnerabilities were later exposed by teams like those at Weizmann Institute of Science.

Products and services

The company's portfolio centers on identity and access management (IAM) and fraud detection. Its flagship RSA SecurID product, introduced in the 1990s, uses two-factor authentication with hardware and software tokens to secure access to corporate networks. Other major offerings include the RSA Archer platform for governance, risk management, and compliance (GRC) and the RSA NetWitness suite for security information and event management (SIEM) and threat detection. These products are deployed by major financial institutions, government agencies like the United States Department of Defense, and large enterprises to protect against threats ranging from phishing to advanced persistent threats.

Security incidents and controversies

The organization faced major scrutiny following the 2011 breach of its RSA SecurID systems, widely attributed to a People's Liberation Army hacking group, which compromised seed values used to generate tokens. This incident, investigated by agencies like the Federal Bureau of Investigation, undermined trust in a core product and led to costly remediation efforts for clients, including Lockheed Martin. Furthermore, the company became embroiled in controversy after documents leaked by Edward Snowden suggested it had entered a secret multi-million dollar contract with the National Security Agency (NSA) to adopt a compromised random number generator, the Dual_EC_DRBG, as a default in its BSAFE toolkit, allegations that sparked hearings before the United States Congress.

Corporate affairs

Following its acquisition by Symphony Technology Group, the company operates as an independent, privately-held entity. Its global headquarters are in Bedford, Massachusetts, with major offices and research labs worldwide, including in Israel and India. The company remains active in the cybersecurity community, sponsoring the annual RSA Conference in San Francisco, one of the industry's largest gatherings, and participating in standards bodies like the National Institute of Standards and Technology (NIST). It competes with other major security firms such as Palo Alto Networks, CrowdStrike, and Okta in the dynamic cybersecurity market.

Category:Computer security companies Category:Cryptography companies Category:Companies based in Massachusetts