XKeyscore

XKeyscore
Name	XKeyscore
Developer	National Security Agency
Released	2008–2013 (publicly revealed 2013)
Programming language	Classified
Operating system	Classified
Genre	Signals intelligence, mass surveillance

XKeyscore is a classified signals intelligence system developed and operated by the National Security Agency (NSA) for searching and analyzing global Internet data. Leaked documents revealed its role in retrospective searches of intercepted communications, sparking debates involving Edward Snowden, Glenn Greenwald, Laura Poitras, and multiple international news organizations. Coverage and reaction involved actors such as the United States Congress, the European Parliament, and national intelligence services in countries including United Kingdom, Germany, Australia, and Canada.

Overview

Designed to allow analysts to query large corpora of intercepted data, the program was described in slides attributed to the NSA and published by journalists associated with The Guardian, The Washington Post, and Der Spiegel. Reporting cited whistleblower Edward Snowden as the source, with editorial work by Glenn Greenwald and Laura Poitras and investigations by outlets including The New York Times, The Intercept, and El País. The disclosures prompted hearings before the United States Senate Select Committee on Intelligence, questions from representatives such as Senator Ron Wyden and Senator Mark Udall, and inquiries from privacy advocates including Amnesty International and Human Rights Watch.

Functionality and Capabilities

Documents and reporting described capabilities to index and search network traffic, email, web browsing, and metadata across protocols handled by providers such as Google, Yahoo!, Microsoft, Facebook, AOL, and Apple Inc.. Slides alleged filters for selectors like IP addresses, email addresses, telephone numbers, and keywords connecting to entities such as Al-Qaeda, Taliban, Islamic State of Iraq and the Levant, and individuals linked to counterterrorism investigations. Analysts reportedly used tools alongside systems named in reporting, including Boundless Informant, PRISM, and MUSCULAR, creating linkages to infrastructure involving AT&T, Verizon Communications, and submarine cable points in cities like New York City, London, and Frankfurt. Journalistic accounts compared the system’s breadth to earlier programs overseen by agencies during events like the Iraq War and the War in Afghanistan (2001–2021).

Architecture and Data Sources

Leaked slides depicted distributed servers, collection nodes, and databases located at regional collection sites, sharing concepts with classified architectures developed by the Signals Directorate (NSA), and leveraging software engineering approaches similar to large-scale search systems used by Google LLC, Yahoo! Inc., and Microsoft Corporation. Data sources cited included upstream Internet backbone taps, partnerships with telecommunications carriers including BT Group and Vodafone, commercial peering points in hubs such as Ashburn, Virginia and Equinix, and data from cooperative foreign agencies like the Government Communications Headquarters and the Australian Signals Directorate. Analysis referenced protocol handling for Hypertext Transfer Protocol, Simple Mail Transfer Protocol, and Transmission Control Protocol, and integration with analytics systems similar to those used in enterprise environments by vendors like Oracle Corporation and IBM.

Operational Use and Deployment

Operational accounts in disclosures mentioned field deployment at regional sites run by NSA and partner signals intelligence services within the Five Eyes alliance, involving United Kingdom, Canada, Australia, and New Zealand. Training materials reportedly demonstrated rapid search workflows for analysts with oversight processes purportedly involving internal offices such as the NSA Office of General Counsel and review by bodies like the Foreign Intelligence Surveillance Court. Deployments touched on international incidents prompting diplomatic exchanges with governments including Germany and Brazil, and parliamentary scrutiny in institutions like the Bundestag and the European Commission.

Legal, Privacy, and Ethical Issues

Revelations provoked litigation and legislative responses tied to statutes and institutions such as the Foreign Intelligence Surveillance Act, the United States Department of Justice, the European Court of Human Rights, and national privacy authorities like the Federal Trade Commission and the Bundesdatenschutzbeauftragter. Civil society organizations including Electronic Frontier Foundation, Privacy International, and Center for Democracy & Technology challenged practices in courts and public fora, citing concerns under laws such as the Fourth Amendment to the United States Constitution and European data protection frameworks like the General Data Protection Regulation. Debates involved ethics scholars at institutions such as Harvard University, Stanford University, and Oxford University on surveillance, proportionality, and transparency.

Public Disclosure and Media Coverage

Media coverage unfolded across outlets including The Guardian, The Washington Post, The New York Times, Der Spiegel, El País, The Intercept, and broadcasters such as BBC News, CNN, and Al Jazeera. Reporting influenced public discourse in national legislatures like the United States Congress and the European Parliament and led to investigative journalism awards and discussions at conferences including South by Southwest and DEF CON. The disclosures catalyzed policy reviews at multinational corporations such as Google, Microsoft Corporation, and Yahoo! Inc. and negotiations over data transfers involving entities like Microsoft Corporation and transatlantic frameworks discussed with the European Commission.

Category:Signals intelligence