National Security Agency (NSA)
The U.S. signals intelligence agency whose mass surveillance programs — revealed by Edward Snowden in 2013 — form the direct historical precedent for concerns about AI-enabled surveillance in the Anthropic-Pentagon dispute.
The National Security Agency is the U.S. government’s primary signals intelligence (SIGINT) and information assurance agency, operating under the Department of Defense. Founded in 1952, the NSA has historically operated with minimal public oversight and a pattern of possessing technical capabilities far ahead of the private sector.
Surveillance Programs Revealed by Snowden
In 2013, former NSA contractor Edward Snowden disclosed the existence and scope of multiple classified surveillance programs:
PRISM (US-984XN)
Under Section 702 of the FISA Amendments Act, the NSA obtained electronic communications from nine major U.S. technology companies: Microsoft (joined 2007), Yahoo (2008), Google (2009), Facebook (2009), PalTalk (2009), YouTube (2010), Skype (2011), AOL (2011), and Apple (2012). Internal NSA documents described PRISM as “the number one source of raw intelligence used for NSA analytic reports.”
XKeyscore
A real-time search and analysis system operating on over 700 servers at approximately 150 global locations. Training materials stated it covered “nearly everything a typical user does on the internet.” Some sites received over 20 terabytes of data per day. Critically, analysts could conduct searches without prior court approval.
Bulk Telephony Metadata Collection
Under Section 215 of the USA PATRIOT Act, the NSA collected call records — numbers, times, durations — of millions of Americans on an ongoing daily basis. A secret FISA Court order compelling Verizon to provide this data was the first Snowden revelation, published June 5, 2013. The Second Circuit Court of Appeals ruled this program illegal in ACLU v. Clapper (May 2015).
MUSCULAR (DS-200B)
A joint NSA/GCHQ program that tapped private fiber-optic cables connecting Google and Yahoo data centers outside the United States — without warrants or court orders. In a single 30-day period, MUSCULAR collected 181 million records, more than twice the data points of PRISM.
Cryptographic Foreknowledge
The NSA has a documented pattern of possessing mathematical capabilities decades ahead of public research:
- Differential cryptanalysis: IBM researcher Don Coppersmith confirmed in 1994 that the NSA knew about differential cryptanalysis during the design of the Data Encryption Standard in the mid-1970s — sixteen years before Biham and Shamir’s public discovery in 1990. The DES S-boxes were specifically hardened against this attack.
- Public-key cryptography: GCHQ mathematicians James Ellis (1970), Clifford Cocks (1973), and Malcolm Williamson (1974) developed the concepts underlying Diffie-Hellman and RSA years before their public invention — declassified by GCHQ in 1997.
- Dual EC DRBG backdoor: Snowden documents revealed that the NSA deliberately inserted a backdoor into the Dual EC DRBG random number generator standard (NIST SP 800-90A, 2006), and paid RSA Security $10 million to make it the default in their BSAFE toolkit. NIST withdrew the standard in 2014.
The Domestic Surveillance Question
The distinction between foreign and domestic surveillance proved largely theoretical in practice:
- Section 702 programs (PRISM, upstream) legally targeted only non-U.S. persons abroad, but Americans’ communications were routinely collected “incidentally” — and then queried by the FBI using Americans’ identifiers without warrants (so-called “backdoor searches”).
- Section 215 bulk metadata was explicitly domestic — the Verizon order covered calls “wholly within the United States.”
- MUSCULAR operated outside U.S. legal jurisdiction but collected Americans’ data transiting international links.
Relevance to the Current Dispute
The NSA’s surveillance history is not background context — it is the direct precedent that makes Anthropic’s position intelligible. The company’s refusal to allow Claude to be used for mass surveillance was informed by the demonstrated reality that intelligence agencies, when given surveillance tools, will deploy them at maximum scale against both foreign and domestic targets. AI would make Snowden-era programs look primitive by comparison.