Dangers of Trusting Encryption Supply Chains

Recently, ArsTechnica published "The U.S. Navy, NATO, and NASA are using a
shady Chinese company's encryption chips". The article questioned
whether hardware components used for encryption/decryption actually protect
against unauthorized information disclosure.

Unauthorized disclosure represents a small fraction of the potential hazards
posed by unverified cryptographic implementations. Deliberate covert
functionality within a hardware encryption/decryption implementation poses
far more serious potential for large scale mischief, including weakened
encryption keys; distorted encryption keys; and mass denial of information
episodes. "Black box" testing …

amp article chinese chips components covert decryption disclosure encryption hardware information information disclosure nasa nato navy protect supply supply chains