By Martin E. Hellman, Vinton G. Cerf
Long before Vinton Cerf and Martin Hellman changed the world with their inventions, they were young assistant professors at Stanford University who became fast friends. Chances are that you relied on their innovations today. Cerf is considered one of the “fathers of the internet” for having invented, along with Robert Kahn, the internet’s protocols and architecture, known as Transmission Control Protocol/Internet Protocol (TCP/IP). Hellman is seen as a “father of public key cryptography” for having invented, along with Whitfield Diffie and Ralph Merkle, the technology that protects monetary transactions on the internet every day. More than 50 years and two technological revolutions later, the friendship between Vint and Marty—as they know each other—endures. This is despite, or perhaps because of, their sometimes different views. You see, while they do not always agree, they both enjoy a good intellectual debate, especially when the humans they sought to bring together with their inventions face existential threats.
Not long after giving the world public key cryptography, Hellman switched his focus from encryption to efforts that might avoid nuclear war. “What’s the point of developing new algorithms if there’s not likely to be anybody around in 50-100 years?” Hellman recalls thinking at the time. He did not then envision that cybersecurity would also become an existential threat or what it is today—an escalatory step toward nuclear threats that could lead to nuclear use.
Sometime after TCP/IP provided the foundation for the internet, Cerf joined Google as its Chief Internet Evangelist and vice president, where he leads efforts to spread the internet, via global policy development, to billions of people around the world without access. Among other projects, he has also had a hand in supporting NASA’s effort to build an interplanetary internet that operates today.
The world has changed in dramatic ways since Cerf and Hellman met 50 years ago. Yet the foundation of their friendship—good intellectual debates—has not. On a recent private phone call with each other, the two friends discussed the National Academies of Sciences, Engineering, and Medicine’s project seeking to answer the question, “Should the US use quantitative methods to assess the risks of nuclear war and nuclear terrorism?” While both agree that the US needs to understand the risk of nuclear war, they disagree about whether a quantitative analysis is necessary. What follows are their thoughts, presented here for Bulletin readers.
Is the risk of nuclear deterrence failing acceptable? Former Secretary of Defense James Schlesinger thought so. In a 2009 interview, he stated that the US would need a strong nuclear deterrent “more or less in perpetuity.” In contrast, former Secretary of Defense Robert McNamara stated in the 2003 documentary, Fog of War, that “the indefinite combination of human fallibility and nuclear weapons will destroy nations.” So, is the risk of failure acceptable or unacceptable? When nuclear risk is stated in generalities, it is difficult to determine who is right.
In the 1970s, such questions were, at best, of passing interest to me. My research in cryptography consumed me. That wasn’t all bad since it led to the invention of public key cryptography and the foundation of much of modern cybersecurity. But, slowly and painfully, I came to see that my over-focus on career and logic was killing my marriage. Then, in 1981, Ronald Reagan’s assumption of the presidency brought the nuclear threat into sharp focus.
As explained in a book that my wife, Dorothie, and I wrote, I realized that it wasn’t smart to neglect risks either to my marriage or to the planet (and there was a surprising connection between the two). I shifted my research from information security to international security, with a focus on the risk of nuclear deterrence failing. Almost as soon as I looked at that question with new eyes, I saw that the risk of nuclear devastation was unacceptably high. I have continued to develop that line of thinking and here I summarize my current perspective.
Martin Hellman considers his quantitative risk analysis for nuclear war.
This article uses a simple, quantitative estimate to show that the risk of a full-scale nuclear war is highly unacceptable, and that a child born today may well have less-than-even odds of living out his or her natural life without experiencing the destruction of civilization in a nuclear war.
Some, including my friend and colleague, Vinton Cerf, prefer a qualitative analysis for reasons he explains in his companion article. Others argue that a quantitative estimate of the risk of a full-scale nuclear war is not possible because such an event has never occurred. They are right in the limited sense that it is not possible to determine if the risk of a nuclear war is one percent per year versus two percent per year. But it is possible to upper and lower bound it.
If someone were to propose that the risk were one percent per day, I’d rule that out as far too high because then nuclear war would be almost certain within the next year. Similarly, if someone were to suggest that the probability were one in a million per year, I’d consider that too low because it would imply that nuclear deterrence as currently practiced could work for approximately a million years. Considering the historical record of nuclear near misses, some of which are detailed in Vint’s article, a million years is far too optimistic. (Of course, if humanity survives for another million years, major events will change the risk appreciably. Here, I seek only to estimate the risk over the next year, during which time such changes will be minimal. Extrapolating that annualized estimate to the next several decades also is reasonable, especially given the estimate’s large uncertainty bounds.) These two extreme cases—nuclear catastrophe either in the next year or in a million years—establish initial upper and lower bounds on the risk.
Next, I sought to narrow the range. In my estimation, and based on my extensive study of nuclear risks, ten percent per year is also an upper bound since we have survived approximately 60 years of nuclear deterrence without the use of any nuclear weapons in warfare, much less a full-scale exchange. Similarly, 0.1 percent per year seems too low because that would imply that current policies could be continued for approximately 1,000 years before civilization would be expected to be destroyed. Over that time period, and subject to the above caveat about the risk changing over time, I extrapolate from past events and estimate that we would expect on the order of ten major crises comparable to Cuba 1962; 100 lesser crises comparable to the 1995-1996 Taiwan Straits Crisis, the 2008 Russo-Georgian War, or the ongoing conflict in Ukraine that started in 2014; plus a large number of other events that could lead to nuclear threats and therefore, potentially, to nuclear use.
If you agree with my reasoning that the risk of a full-scale nuclear war is less than ten percent per year but greater than 0.1 percent per year, that leaves one percent per year as the order of magnitude estimate, meaning that it is only accurate to within a factor of ten. For related reasons, that one percent per year estimate really spans a range from roughly 0.3 to three percent per year.
A risk of one percent per year would accumulate to worse-than-even odds over the lifetime of a child born today. Even if someone were to estimate that the lower bound should be 0.1 percent per year, that would be unacceptably high—that child would have an almost ten percent risk of experiencing nuclear devastation over his or her lifetime.
The above arguments show the importance of not only estimating the risk of a full-scale nuclear war, but also establishing a maximum acceptable level for that risk. If someone argues that 0.1 percent per year or some other value is an acceptable level of risk, society can then judge whether or not it agrees.
This quantitative approach avoids the ambiguity of non-quantitative arguments such as Schlesinger’s and McNamara’s. When the risk is highly uncertain, how do you determine who’s right? A quantitative approach, even to an order of magnitude as done here, requires both proponents and opponents of nuclear deterrence to justify their positions in ways that others can more easily decide who to believe.
I hope you will agree with either my quantitative approach or Vint’s qualitative approach, both of which conclude that the risk of a nuclear war is unacceptably high and risk reduction measures are urgently needed. For those who accept neither of our approaches, I have two questions:
First, what evidence supports the belief that the risk of nuclear deterrence failing is currently at an acceptable level?
Second, can we responsibly bet humanity’s existence on a strategy for which the risk of failure is totally unknown?
No comments:
Post a Comment