Crypto AG
Swiss encryption-equipment manufacturer secretly controlled by US and West German intelligence services.
Last updated August 25, 2026
AI crawler reads
No AI crawler has read this profile since Oct 28, 2026.
History
Crypto AG's origins lay in AB Cryptoteknik, a Swedish cryptography company founded by Arvid Gerhard Damm in 1920. The business produced the C-36 mechanical cipher machine. Boris Hagelin, an early investor and later controlling figure, took over the company after Damm's death. When Germany invaded Norway in 1940, Hagelin moved to the United States and presented the machine to the US military. The equipment attracted the attention of American code-breakers, and a wartime licensing arrangement led to the production of approximately 140,000 units for US forces. Hagelin had developed relationships with influential American cryptologists, including William Friedman. In 1948 he moved to Switzerland, partly for tax reasons, and in 1952 the company's Swiss structure was established. The Swiss business became Crypto AG. A Liechtenstein holding structure was also created. During the 1950s, Hagelin and officials associated with the NSA exchanged information about the performance of different machines, the countries that were buying them, and the countries to which stronger systems should not be sold. Later correspondence involved NSA personnel Howard C. Barlow and Lawrence E. Shinn. Declassified US material indicates that an understanding concerning the C-52 was reached in 1955. The arrangement enabled US and British intelligence authorities to obtain technical information and customer data and to influence how some machines were configured and documented. The CX-52, a more advanced model, was reportedly withheld from selected countries, while some operating manuals were prepared in ways that did not expose the full strength of the available system. These measures did not necessarily compromise every product or every customer, but they created a covert channel through which intelligence agencies could exploit equipment sold as secure. The decisive ownership change came in June 1970, when the CIA and BND secretly bought Crypto AG for approximately US$5.75 million. The purchase created the foundation for an intelligence program that the agencies later associated with the names Thesaurus, Rubicon, and Minerva. The covert owners used the company as a commercial platform to collect and decode communications from a broad range of countries. The arrangement remained hidden through bearer shares and a complex ownership structure. The company grew substantially, with revenue rising from a relatively small level in the 1950s to millions of Swiss francs in the 1970s, although detailed financial figures are not consistently available from public sources. Crypto AG expanded its products beyond mechanical devices. Its portfolio included encryption for radio, fixed-line telephone, fax, GSM, Ethernet, and STM communications. The C-52, CX-52, CD-57, and HX-63 became among the best-known machines associated with the company. Customers included more than 120 countries across Latin America, Africa, Asia, Europe, and the Middle East. The broad customer base made the business strategically valuable but also increased the consequences of any hidden weakness. Public suspicion grew in the 1980s and 1990s. After the 1986 Berlin discotheque bombing, the US government publicly described intercepted Libyan communications as evidence supporting its attribution of responsibility. The episode prompted questions about whether Crypto AG equipment had facilitated access to Libyan traffic. In 1991, a coded Iranian message connected to the killing of former Iranian prime minister Shapour Bakhtiar was reportedly deciphered by Western governments. Iranian authorities subsequently suspected that their Crypto AG systems were compromised. The arrest of salesman Hans Buehler in 1992 became an international incident. After his release in 1993, Crypto AG dismissed him and sought reimbursement for the bail it had paid. Swiss and German media later investigated the allegations, while the company denied that outside services had manipulated its equipment. Crypto AG broadened its corporate activities in the 1990s. It acquired InfoGuard AG, a provider of encryption solutions for banks, in 1994. It later sold G.V. LLC, a Wyoming-based communications interception and encryption company, in 2010. Despite recurring allegations, the central intelligence relationship remained secret for decades. US documents released in 2015 provided additional evidence of long-running cooperation with NSA and related agencies. In 2018, the original company was liquidated. Its Swiss domestic business was reorganized under CyOne, while Swedish entrepreneur Andreas Linde established Crypto International AG and acquired the Crypto name, international distribution network, and product rights. InfoGuard became management-owned through a buyout. The original company was therefore replaced by separate successor structures before the public disclosure of its intelligence history. On 11 February 2020, coordinated reporting by The Washington Post, ZDF, and SRF revealed the CIA-BND ownership arrangement and the scale of Operation Rubicon. A Swiss parliamentary investigation subsequently stated that Swiss intelligence had been aware of the company's involvement and had benefited from the operation. Swiss export controls imposed on Crypto International AG after the disclosures created diplomatic tensions with Sweden. Crypto AG's history has since been treated as a major case study in supply-chain trust, commercial cryptography, intelligence exploitation, and the risks created when governments secretly control security vendors.
- 2020
Operation Rubicon becomes public
[2]Investigative reporting disclosed the CIA and BND's secret control of Crypto AG. A Swiss parliamentary inquiry later examined Swiss authorities' knowledge and benefits.
- 2018
Original company is liquidated
[1]Crypto AG was dissolved and its activities, intellectual property, and brand-related rights were divided among successor companies.
- 2015
US documents provide further evidence
[1]Declassified and partly redacted US government documents added evidence concerning the intelligence relationship and compromised equipment.
- 1994
Crypto AG acquires InfoGuard AG
[1]The company bought InfoGuard AG, extending its activities into encryption solutions for banks.
- 1992
Iran detains Hans Buehler
[1]Iran arrested a Crypto AG salesman amid suspicions that the company's machines had been compromised.
- 1970
CIA and BND secretly acquire Crypto AG
[1]The CIA and West German BND jointly purchased the company, initiating the ownership structure behind the intelligence operation later known as Rubicon.
- 1955
Secret technical understanding concerning C-52 equipment
[1]Declassified documents indicate that Hagelin and William Friedman reached an unwritten understanding that gave US and British intelligence advantages concerning selected Crypto AG systems and customers.
- 1952
Crypto AG is established in Switzerland
[1]The company was incorporated in Switzerland and became associated with the manufacture and international sale of Hagelin encryption systems.
- 1948
Hagelin relocates to Switzerland
[1]Hagelin moved the business to Switzerland, where the later Crypto AG structure developed.
- 1940
Hagelin moves to the United States
[1]Boris Hagelin brought the company's cryptographic technology to the United States after the German invasion of Norway, leading to a wartime US licensing arrangement.
Products and positioning
Specialist provider of government, military, diplomatic, telecommunications, and commercial encryption equipment.
Mechanical cipher machine
C-52
The C-52 was one of Crypto AG's best-known mechanical encryption machines and a central product in the company's early international business. Declassified material indicates that US intelligence authorities obtained information about its technical operation and customer base, reducing the effort required to analyze some traffic protected by the machine.
Mechanical cipher machine
CX-52
The CX-52 was a later and more advanced mechanical system in the Hagelin product family. Historical accounts state that the company restricted sales of the model to certain countries and that documentation and configuration practices could prevent customers from using its full theoretical security.
Cipher machine
CD-57
The CD-57 was part of Crypto AG's range of cipher devices supplied for institutional and government communications. Publicly available historical sources identify the model as one of the company's notable machines, although detailed specifications and launch information are limited.
Cipher machine
HX-63
The HX-63 was another Crypto AG encryption machine used in the company's historical equipment portfolio. It formed part of the transition from traditional mechanical cryptography toward broader institutional communications-security systems.
Information-security equipment
Communications encryption systems
Beyond its named cipher machines, Crypto AG offered encryption systems for radio, telephone, fax, GSM, Ethernet, and STM communications. These products targeted governments, armed forces, diplomatic networks, telecommunications operators, banks, and other organizations requiring protected voice or data transmission.
Controversies
2020
Operation Rubicon and secret intelligence ownership
Investigations revealed that the CIA and BND had secretly owned Crypto AG for decades and used the company to obtain intelligence from communications encrypted with equipment sold internationally. The disclosure also prompted a Swiss parliamentary examination of the Swiss authorities' awareness and involvement.
1992
Arrest of Hans Buehler in Iran
Iran detained Crypto AG salesman Hans Buehler after suspecting that the company's systems enabled Western interception of Iranian communications. His detention and the subsequent dispute over bail became an early public episode in the wider Crypto AG controversy.
1986
Questions following the Libya communications episode
The US government's public use of intercepted Libyan communications after the Berlin discotheque bombing intensified suspicions that Crypto AG equipment might have allowed Western agencies to read protected traffic.
Brand decisions
2020
Swiss authorities impose export controls after disclosureOtherBackground
The public revelation of the company's intelligence history raised concerns about the successor company's technology, ownership, and international trade.
Action taken
Swiss authorities imposed export controls affecting Crypto International AG.
Aftermath
The controls created diplomatic friction with Sweden and reportedly contributed to Sweden abandoning planned celebrations of a century of diplomatic relations with Switzerland.
2018
Liquidation and separation into successor companiesStrategyBackground
The historic company was reorganized before the public disclosure of its intelligence ownership.
Action taken
Crypto AG was liquidated; CyOne took the Swiss domestic business, while Crypto International AG acquired the brand name, international network, and certain product rights.
Aftermath
The original Crypto AG ceased to operate, while the later disclosure triggered export controls and diplomatic tensions involving Sweden and Switzerland.
1994
Acquisition of InfoGuard AGM&ABackground
Crypto AG sought to expand beyond traditional government cryptography into commercial and banking security.
Action taken
The company acquired InfoGuard AG, which provided encryption solutions to banks.
Aftermath
InfoGuard later became management-owned as part of the restructuring surrounding the liquidation of the original Crypto AG.
1970
Secret sale to the CIA and BNDM&ABackground
The intelligence services sought a covert commercial mechanism for accessing foreign encrypted communications and acquiring influence over a major encryption supplier.
Action taken
The CIA and BND jointly purchased Crypto AG through a concealed ownership structure.
Aftermath
The company continued operating as an apparently independent Swiss manufacturer while serving as the platform for a decades-long intelligence program.
Recent events
- 2018
Crypto AG is liquidated and its business divided[1]
M&A · Bankruptcy · Other
The original Crypto AG was wound up and its assets and intellectual property were transferred to successor businesses, including CyOne and Crypto International AG.
Sources2 sources
Cite this profile: Cite the canonical profile. /brand-wiki/crypto-ag · Editorial policy · How profiles are compiled