Title: Classification guide for ECI Pawleys (PAW)

Release Date: 2014-10-10

Document Date: 2006-11-14

Description: This 2006 NSA classification guide outlines the sensitivity of the agency’s clandestine human and electronic access to systems in order to “obtain cryptographic information and material”: see the Intercept article Core Secrets: NSA Saboteurs in China and Germany, 10 October 2014.

Document: TOP SECRET//COMINT//REL TO USA, AUS, CAN, GBR, NZL//20291123

NATIONAL SECURITY AGENCY
CENTRAL SECURITY SERVICE

0^ftUJDt54 SD7
AôEWf bDTBb3LP HDEYI
D0(55^ BUH 5654

RYPTANALYSIS 8
PLOITATION SERVICES
CRYPTANALYSIS &
XPLOITATION SERVICES

(U//FOUO) CLASSIFICATION GUIDE FOR
ECI PAWLEYS (PAW)

02-19

Effective Date: 14 November 2006

CLASSIFIED BY:

REASON FOR CLASSIFICATION: 1.4 (c)
DECLASSIFY ON: 20291123

ENDORSED BY:

TOP SECRET//COMINT//REL TO USA, AUS, CAN, GBR, NZL//20291123

TOP SECRET//COMINT//REL TO USA, AUS, CAN, GBR, NZL//20291123

(U//FOUO) NSA/CSS CLASSIFICATION GUIDE TITLE/NUMBER:

ECI PAWLEYS (PAW) Classification Guide 02-19

(U) PUBLICATION DATE:
(U) OFFICE OF ORIGIN:
(U//FOUO) POC:

(U) PHONE:

14 November 2006

Cryptanalysis & Exploitation Services (S31)

(U//FOUO) ORIGINAL CLASSIFICATION AUTHORITY:

(TS//SI//REL) ECI PAWLEYS (PAW) protects clandestine HUMINT and computer network access intended to obtain
cryptographic information and material. It protects operational details, as well as any equipment, materials, technical
information and some SIGINT capabilities gained as a result of such access.

Description of Information Classification/ Marking Reason Declass Remarks
1. (U//FOUO) The term PAWLEYS or trigraph PAW or any officially registered PAWLEYS project coverterms standing alone without reference to a specific operation or target. UNCLASSIFIED N/A N/A
2. (U//FOUO) The term PAWLEYS or the trigraph PAW in association with ECI, NSA, SIGINT, or intelligence. UNCLASSIFIED// FOR OFFICIAL USE ONLY N/A N/A
I (U) GENERAL GUIDELINES AND OPERATIONAL DETAILS
3. (TS//SI//REL) The fact that NSA has requirements for: • HUMINT acquisition of foreign cryptographic information and material. TOP SECRET// COMINT//REL 1.4(c) 20291123
• acquisition of foreign cryptographic information and material via a Computer Network Exploitation (CNE) operation.
4. (U//FOUO) The details of PAWLEYS requirements without reference to locations or operational aspects. TOP SECRET// COMINT//REL 1.4(c) 20291123 (U//FOUO) Some requirements are NOFORN or restricted to a subset of 2nd Party partners.

-2-

TOP SECRET//COMINT//REL TO USA, AUS, CAN, GBR, NZL//20291123

TOP SECRET//COMINT//REL TO USA, AUS, CAN, GBR, NZL//20291123

Description of Information Classification/ Marking Reason Declass Remarks
5. (TS//SI//KEL) liCI PAWLliYS protects the following as they arc related to CNE operations: ( 1 ) The fact that an operation is specifically intended to acquire or enable the acquisition of cryptographic information (2) The success (or lack thereof! in acquiring or enabling the acquisition of the intended cryptographic information (3) The technical details of CNE tools that arc designed for a specific target's cryptographic- system. (4) Cryptographic information collected by a CNE operation conducted specifically for that purpose. TOP SECRET// C0MINT-EC1 PAW// REL 14(c) 20291123 (TS//S1//REL) PAWLEYS will appy to CNE operations and tools (and resulting cryptographic information) ONLY when the operation or tool i> tailored to a specific target's cryptographic system. (U//EOUO) NOFORN or some limited 2nd Party release may be applied. Operational information is extremely sensitive and is only divulged under the strictest of need- to-know rules.
6. (TS.vSL.REL) ECT PAWLEYS protects the following as they arc related to clandestine HL'MINT operations: ( 1 ) The material. equipment or information resulting from a PAWLEYS operation and the fact of access. (2) Any analysis or technical capability developed as a result of PAWLEYS information. (3) The location, purpose, time frame, means of access or any other operational detail relating to the planning of or accomplishment of a clandestine cryptographic access. (4) Any identifying information regarding HUMINT assets involved in PAWLEYS operations. TOP SECRET// C0MINT-EC1 PAW// REL 14(c) 20291123 (U//FOUO) “Any analysis or technical capability" would include technical papers, notes, software or other techniques, which could not have been developed without PAWLEYS information. (U//EOUO) NOFORN or some limited 2nd Party release may be applied. Operational information is extremely sensitive and is only divulged under the strictest of need- to-know rules.

- 3 -

TOP SECRET//COMINT//REL TO USA, AUS, CAN, GBR, NZL//20291123

TOP SECRET//COMINT//REL TO USA, AUS, CAN, GBR, NZL//20291123

Description of Information Classification/ Reason Declass Remarks
Marking
(C) PARTNER RELATIONSHIPS
7. (S//SI//REL) The tact that NS A partners with CIA. FBI. DIA. DUS or other USG entities to address PAWLEYS requirements. SECRET// COM1NT//REL 14(c) 20291123
8. (S't'REL) The fact that CSE. DSD. GCHQ and GCSB all operate PAWLEYS programs and that NSA collaborates with each on targets of mutual interest. SECRET//REL 14(c) 20291123

-4 -

TOP SECRET//COMINT//REL TO USA, AUS, CAN, GBR, NZL//20291123

e-Highlighter

Click to send permalink to address bar, or right-click to copy permalink.

Un-highlight all Un-highlight selectionu Highlight selectionh