Hackers trying to breach UIDAI security will not only need 13-foot high ladders, but also the world’s fastest computer and over 13.772 billion years to successfully access Aadhaar data, if UIDAI CEO Dr. Ajay Bhushan Pandey is to be believed.
Following the recent statement made by Attorney General K K Venugopal, in which he claimed that Aadhaar data remained secure in a complex that has 13 foot high and 5 foot thick walls, UIDAI CEO Pandey recently told the Supreme Court that it would take “more than the age of the universe for the fastest computer in earth, or any supercomputer, to break one key of Aadhaar encryption”.
Pandey was given the first-ever opportunity to conduct a presentation in front of a five-judge Constitution Bench led by Chief Justice of India Dipak Misra in the Supreme Court on Thursday. In the hour long presentation, which is scheduled to continue on March 27, Pandey told the Constitution Bench that Aadhaar data was protected by a 2048-bit encryption and added ominously, “once biometrics comes to us, it will never go away.”
To this claim, Justice A K Sikri, one of the panel members, noted, “Maybe when it reaches you, it gets encrypted, but at the center, it may be captured by a private party”. In Aadhaar’s defense, Pandey said that the UIDAI did not share biometric details with anyone and the “software is such that the moment the resident presses the save key, entire data gets encrypted by the 2048-bit key.”
Justice Sikri also asked Pandey why the UIDAI had blacklisted 49,000 registered operators, to which Pandey said that those operators had been de-registered for corruption, carelessness and harassment of the public. Pandey said, “Some of them used to take money from the public, others would not enter the details properly. We have a zero-tolerance policy.”
When Justice Sikri pressed further, Pandey revealed that:
“Initially we trusted these operators, but they ended up registering trees…Jamun trees.”
It’s worth noting that such “registered operators” have previously been accused of selling Aadhaar data for as low as Rs. 500. A fact that Pandey carefully omitted.
Unfortunately for Indians worried about Aadhaar and data safety, the latest comments only add to the dilemma of whether to laugh or outrage at the UIDAI.