New York Times
December 26, 2004

AS NUCLEAR SECRETS EMERGE, MORE ARE SUSPECTED

By William J. Broad And David E. Sanger

[William J. Broad reported from New York for this article, and David
E. Sanger from Washington.]

When experts from the United States and the International Atomic
Energy Agency came upon blueprints for a 10-kiloton atomic bomb in the
files of the Libyan weapons program earlier this year, they found
themselves caught between gravity and pettiness.

The discovery gave the experts a new appreciation of the audacity of
the rogue nuclear network led by A.Q. Khan, a chief architect of
Pakistan's bomb. Intelligence officials had watched Dr. Khan for years
and suspected that he was trafficking in machinery for enriching
uranium to make fuel for warheads. But the detailed design represented
a new level of danger, particularly since the Libyans said he had
thrown it in as a deal-sweetener when he sold them $100 million in
nuclear gear.

"This was the first time we had ever seen a loose copy of a bomb
design that clearly worked," said one American expert, "and the
question was: Who else had it? The Iranians? The Syrians? Al Qaeda?"

But that threat was quickly overshadowed by smaller questions.

The experts from the United States and the I.A.E.A., the United
Nations nuclear watchdog -- in a reverberation of their differences
over Iraq's unconventional weapons -- began quarreling over control of
the blueprints. The friction was palpable at Libya's Ministry of
Scientific Research, said one participant, when the Americans accused
international inspectors of having examined the design before they
arrived. After hours of tense negotiation, agreement was reached to
keep it in a vault at the Energy Department in Washington, but under
I.A.E.A. seal.

It was a sign of things to come.

Nearly a year after Dr. Khan's arrest, secrets of his nuclear black
market continue to uncoil, revealing a vast global enterprise. But the
inquiry has been hampered by discord between the Bush administration
and the nuclear watchdog, and by Washington's concern that if it
pushes too hard for access to Dr. Khan, a national hero in Pakistan,
it could destabilize an ally. As a result, much of the urgency has
been sapped from the investigation, helping keep hidden the full
dimensions of the activities of Dr. Khan and his associates.

There is no shortage of tantalizing leads. American intelligence
officials and the I.A.E.A., working separately, are still untangling
Dr. Khan's travels in the years before his arrest. Investigators said
he visited 18 countries, including Syria, Saudi Arabia and Egypt, on
what they believed were business trips, either to buy materials like
uranium ore or sell atomic goods.

In Dubai, they have scoured one of the network's front companies,
finding traces of radioactive material as well as phone records
showing contact with Saudi Arabia. Having tracked the network
operations to Malaysia, Europe and the Middle East, investigators
recently uncovered an outpost in South Africa, where they seized 11
crates of equipment for enriching uranium.

The breadth of the operation was particularly surprising to some
American intelligence officials because they had had Dr. Khan under
surveillance for nearly three decades, since he began assembling
components for Pakistan's bomb, but apparently missed crucial
transactions with countries like Iran and North Korea.

In fact, officials were so confident they had accurately taken his
measure, that twice -- once in the late 1970's and again in the 1980's
-- the Central Intelligence Agency persuaded Dutch intelligence agents
not to arrest Dr. Khan because they wanted to follow his trail,
according to a senior European diplomat and a former Congressional
official who had access to intelligence information. The C.I.A.
declined to comment.

"We knew a lot," said a nuclear intelligence official, "but we
didn't realize the size of his universe."

President Bush boasts that the Khan network has been dismantled. But
there is evidence that parts of it live on, as do investigations in
Washington and Vienna, where the I.A.E.A. is based.

Cooperation between the United Nations atomic agency and the United
States has trickled to a near halt, particularly as the Bush
administration tries to unseat the I.A.E.A. director general, Mohamed
ElBaradei, who did not support the White House's prewar intelligence
assessments on Iraq.

The chill from the White House has blown through Vienna. "I can't
remember the last time we saw anything of a classified nature from
Washington," one of the agency's senior officials said. Experts see
it as a missed opportunity because the two sides have complementary
strengths -- the United States with spy satellites and covert
capabilities to intercept or disable nuclear equipment, and the
I.A.E.A. with inspectors who have access to some of the world's most
secretive atomic facilities that the United States cannot legally
enter.

In the 11 months since Dr. Khan's partial confession, Pakistan has
denied American investigators access to him. They have passed
questions through the Pakistanis, but report that there is virtually
no new information on critical questions like who else obtained the
bomb design. Nor have American investigators been given access to Dr.
Khan's chief operating officer, Buhari Sayed Abu Tahir, who is in a
Malaysian jail.

This disjunction has helped to keep many questions about the network
unanswered, including whether the Pakistani military was involved in
the black market and what other countries, or nonstate groups, beyond
Libya, Iran and North Korea, received what one Bush administration
official called Dr. Khan's "nuclear starter kit" -- everything from
centrifuge designs to raw uranium fuel to the blueprints for the bomb.

Privately, investigators say that with so many mysteries unsolved,
they have little confidence that the illicit atomic marketplace has
actually been shut down. "It may be more like Al Qaeda," said one
I.A.E.A. official, "where you cut off the leadership but new elements
emerge."

A Potential Danger

A.Q. Khan may have been unknown to most Americans when he was revealed
about a year ago as the mastermind of the largest illicit nuclear
proliferation network in history. But for three decades Dr. Khan, a
metallurgist, has been well known to British and American intelligence
officials. Even so, the United States and its allies passed up
opportunities to stop him -- and apparently failed to detect that he
had begun selling nuclear technology to Iran in the late 1980's. It
was the opening transaction for an enterprise that eventually spread
to North Korea, Libya and beyond.

Dr. Khan studied in Pakistan and Europe. After he secured a job in the
Netherlands in the early 1970's at a plant making centrifuges -- the
devices that purify uranium -- Dutch intelligence officials began
watching him. By late 1975, they grew so wary, after he was observed
at a nuclear trade show in Switzerland asking suspicious questions,
that they moved him to a different area of the company to keep him
away from uranium enrichment work. "There was an awareness," said
Frank Slijper of the Dutch Campaign against Arms Trade, who recently
wrote a report on Dr. Khan's early days, "that he was a potential
danger."

Dr. Khan suddenly left the country that December, called home by his
government for its atomic project. Years later, investigators
discovered that he had taken blueprints for the centrifuges with him.
In Pakistan, Dr. Khan was working to develop a bomb to counter
India's, and Washington was intent on stopping the project.

It later proved to be the first of several occasions when the United
States failed to fully understand what Dr. Khan was up to. Joseph Nye,
a Harvard professor who has served in several administrations, said
American intelligence agencies thought Pakistan would try to make its
bomb by producing plutonium -- an alternative bomb fuel. Mr. Nye was
sent to France to halt the shipment of technology that would have
enabled Pakistan to complete a reprocessing plant for the plutonium
fuel. "We returned to Washington to celebrate our victory, only to
discover that Khan had already stolen the technology for another path
to the bomb," Mr. Nye recalled.

To gather more atomic gear and skill, Dr. Khan returned to the
Netherlands repeatedly. But the United States wanted to watch him, and
a European diplomat with wide knowledge of nuclear intelligence cited
the two occasions when the C.I.A. persuaded the Dutch authorities not
to arrest him. Intelligence officials apparently felt Dr. Khan was
more valuable as an unwitting guide to the nuclear underworld.

"The Dutch wanted to arrest him," the diplomat said. "But they were
told by the American C.I.A., 'Leave him so we can follow his trail."'

A Chinese Connection

Dr. Khan quickly led the agents to Beijing. It was there in the early
1980's that Dr. Khan pulled off a coup: obtaining the blueprints for a
weapon that China had detonated in its fourth nuclear test, in 1966.
The design was notable because it was compact and the first one China
had developed that could easily fit atop a missile.

American intelligence agencies only learned the full details of the
transactions earlier this year when the Libyans handed over two large
plastic bags with the names of an Islamabad tailor on one side and a
dry-cleaner on other -- one of several clues that it had come from the
Khan Laboratories. The design inside included drawings of more than
100 parts, all fitting in a sphere about 34 inches in diameter, just
the right size for a rocket.

Equally remarkable were the handwritten notations in the margins.
"They made reference to Chinese ministers, presumably involved in the
deal," one official who reviewed it disclosed. And there was also a
reference to "Munir," apparently Munir Khan, Dr. Khan's rival who
ran the Pakistan Atomic Energy Commission and was in a contest with
Dr. Khan to put together a Pakistani weapon that would match India's.

In that race, size was critical, because only a small weapon could be
put atop Pakistani missiles. One note in the margin of the design, the
official said, was that "Munir's bomb would be bigger."

Intelligence experts believe that Dr. Khan traded his centrifuge
technology to the Chinese for their bomb design.

A certain familiarity developed between Dr. Khan and those watching
him.

"I remember I was once in Beijing on a nonproliferation mission,"
said Robert J. Einhorn, a longtime proliferation official in the State
Department, "and we knew that Khan was in Beijing, too, and where he
was. I had this fantasy of going over to his hotel, calling up to his
room, and inviting him down for a cup of coffee."

Of course, he never did. But if he had, Dr. Khan might not have been
surprised.

Simon Henderson, a London-based author who has written about Dr. Khan
for more than two decades, said the Pakistani scientist long suspected
he was under close surveillance. "Khan once told me, indignantly,
'The British try to recruit members of my team as spies,"' Mr.
Henderson recalled. "As far as I'm aware, he was penetrated for a
long, long time."

Still, for all the surveillance, American officials always seemed a
step or two behind. In the 1990's, noted Mr. Einhorn, the assumption
was that Iran was getting most of its help from Russia, which was
providing the country with reactors and laser-isotope technology.
Virtually no attention was paid to its contacts with Dr. Khan.

"It was a classic case of being focused in the wrong place," Mr.
Einhorn said. "And if Iran gets the bomb in the next few years, it
won't be because of the Russians. It will be because of the help they
got from A.Q. Khan."

Triumph and Mystery

As soon as Mr. Bush came to office, his director of central
intelligence, George J. Tenet, began tutoring him on the dangers of
Dr. Khan and disclosing how deeply the agency believed it had
penetrated his life and network. "We were inside his residence,
inside his facilities, inside his rooms," Mr. Tenet said in a recent
speech. "We were everywhere these people were."

But acting on the Khan problem meant navigating the sensitivities of a
fragile ally important in the effort against terrorism. That has
impeded the inquiry ever since.

Washington had little leverage to force Pakistan's president, Gen.
Pervez Musharraf, to clamp down on a national hero, especially since
Dr. Khan may have had evidence implicating the Pakistani government in
some of the transactions. And in interviews, officials said they
feared that moving on Dr. Khan too early would hurt their chances to
roll up the network.

Stephen J. Hadley, the deputy national security adviser, went to
Pakistan soon after the Sept. 11 attacks and raised concerns about Dr.
Khan, some of whose scientists were said to have met with Osama bin
Laden, Al Qaeda's leader. But Mr. Hadley did not ask General Musharraf
to take action, according to a senior administration official. He
returned to Washington complaining that it was unclear whether the
Khan Laboratories were operating with the complicity of the Pakistani
military, or were controlled by freelancers, motivated by visions of
profit or of spreading the bomb to Islamic nations. The Pakistanis
insisted they had no evidence of any proliferation at all, a claim
American officials said they found laughable.

As evidence grew in 2003, Mr. Bush sent Mr. Tenet to New York to meet
with General Musharraf. "We were afraid Khan's operation was entering
a new, more dangerous phase," said one top official. Still there was
little action.

But in late October 2003, the United States and its allies seized the
BBC China, a freighter bearing centrifuge parts made in Malaysia,
along with other products of Dr. Khan's network, all bound for Libya.
Confronted with the evidence, Libya finally agreed to surrender all of
its nuclear program. Within weeks, tons of equipment was being
dismantled and flown to the Energy Department's nuclear weapons lab at
Oak Ridge, Tenn.

Pressures mounted on General Musharraf. "I said to him, 'We know so
much about this that we're going to go public with it,"' Secretary of
State Colin L. Powell told journalists last week. "'And you need to
deal with this before you have to deal with it publicly."'

On television, Dr. Khan was forced to confess but he gave no
specifics, and General Musharraf pardoned the scientist. American
officials pressed to interview him and his chief lieutenant, Mr.
Tahir, a Sri Lankan businessman living in Dubai and Malaysia, who was
eventually arrested by Malaysian authorities.

But the Pakistanis balked, insisting that they would pass questions to
Dr. Khan and report back. Little information has been conveyed.

"Some questions simply were never answered," said one senior
intelligence official. "In other cases, you don't know if you were
getting Khan's answer, or the answer the government wanted you to
hear."

Dr. Khan's silence has extended to the question of what countries,
other than Libya, received the bomb design. Intelligence experts say
they have no evidence any other nation received the design, although
they suspect Iran and perhaps North Korea. But that search has been
hampered by lack of hard intelligence.

"We strongly believe Iran did," said one American official. "But we
need the proof."

Dr. Khan has also never discussed his ties with North Korea, a
critical issue because the United States has alleged -- but cannot
prove -- that North Korea has two nuclear arms programs, one using
Khan technology.

"It is an unbelievable story, how this administration has given
Pakistan a pass on the single worst case of proliferation in the past
half century," said Jack Pritchard, who worked for President Clinton
and served as the State Department's special envoy to North Korea
until he quit last year, partly in protest over Mr. Bush's Korea
policy. "We've given them a pass because of Musharraf's agreement to
fight terrorism, and now there is some suggestion that the hunt for
Osama is waning. And what have we learned from Khan? Nothing."

Some Missing Pieces

In March, American investigators invited reporters to the giant
nuclear complex in Oak Ridge to display the equipment disgorged by the
Libyans. They surrounded the site with guards bearing automatic
weapons, and Energy Secretary Spencer Abraham joined the officials in
showing off some of the 4,000 centrifuges.

"We've had a huge success," he said. But it turned out that the
centrifuges were missing their rotors -- the high-speed internal
device that makes them work. To this day, it is not clear where those
parts were coming from. While some officials believe the Libyans were
going to make their own, others fear the equipment had been shipped
from an unknown location -- and that the network, while headless, is
still alive.

John R. Bolton, the under secretary of state for arms control and
international security, echoed those suspicions, saying the network
still had a number of undisclosed customers. "There's more out there
than we can discuss publicly," he said in April.

Federal and private experts said the suspected list of customers
included Syria, Egypt, Saudi Arabia, Sudan, Malaysia, Indonesia,
Algeria, Kuwait, Myanmar and Abu Dhabi.

Given the urgency of the Libyan and Khan disclosures, many private and
governmental experts expected that the Bush administration and the
I.A.E.A. would work together. But European diplomats said the
administration never turned over valuable information to back up its
wider suspicions about other countries. "It doesn't like to share,"
a senior European diplomat involved in nuclear intelligence said of
the United States. "That makes life more difficult. So we're on the
learning curve."

Federal officials said they were reluctant to give the I.A.E.A.
classified information because the agency is too prone to leaks. The
agency has 137 member states, and American officials believe some of
them may be using the agency to hunt for nuclear secrets. One senior
administration official put it this way: "The cops and the crooks all
serve on the agency's board together."

The result is that two separate, disjointed searches are on for other
nuclear rogue states -- one by Washington, the other by the I.A.E.A.
And there is scant communication between the feuding bureaucracies.

That lack of communication with the United Nations agency extends to
the Nuclear Suppliers Group, a loose organization of countries that
produce nuclear equipment. It can stop the export of restricted atomic
technology to a suspect customer, but it does not report its actions
to the I.A.E.A. Moreover, there is no communication between the
I.A.E.A. and the Bush administration's Proliferation Security
Initiative, which seeks to intercept illicit nuclear trade at sea or
in the air.

"It's a legitimate question whether we need a very different kind of
super-agency that can deal with the new world of A.Q. Khans," said a
senior administration official. "Because we sure don't have the
system we need now."

Dr. ElBaradei, the head of the United Nations agency, says he is
plunging ahead, pursuing his own investigation even as the Bush
administration attempts to have him replaced when his term expires
late next year. In an interview in Vienna, he defended his record,
citing the information he has wrung out of Iran, and his agency's
discovery of tendrils of Dr. Khan's network in more than 30 countries
around the globe.

"We're getting an idea of how it works," he said of the Khan
network. "And we're still looking" for other suppliers and
customers.

One method is to investigate the countries Dr. Khan visited before his
arrest. Nuclear experts disclosed that the countries were Afghanistan,
Egypt, Iran, Ivory Coast, Kazakhstan, Kenya, Mali, Mauritania,
Morocco, Niger, Nigeria, North Korea, Saudi Arabia, Senegal, Sudan,
Syria, Tunisia and the United Arab Emirates. Many of them are Islamic,
and several of the African countries are rich in uranium ore.

In one of its biggest operations, the agency is hunting for clues in a
half dozen of the network's buildings and warehouses in Dubai, which
for years were used for assembling and repacking centrifuges.

Both in Washington and in Vienna, the most delicate investigations
involve important American allies -- including Egypt and Saudi Arabia.
So far, said European intelligence officials familiar with the
agency's inner workings, no hard evidence of clandestine nuclear arms
programs has surfaced.

Suspicious signs have emerged, however. For instance, experts
disclosed that SMB Computers, Mr. Tahir's front company in Dubai for
the Khan network, made telephone calls to Saudi Arabia. But the
company also engaged in legitimate computer sales, giving it plausible
cover. Experts also disclosed that Saudi scientists traveled to
Pakistan for some of Dr. Khan's scientific conferences. But the
meetings were not secret, or illegal.

There is also worry in both Washington and Vienna about Egypt, which
has two research reactors near Cairo and a long history of internal
debate about whether to pursue nuclear arms. But European intelligence
officials said I.A.E.A. inspectors who recently went there found no
signs of clandestine nuclear arms and some evidence of shoddy
workmanship that bespeaks low atomic expectations. As for Syria, the
Bush administration had repeatedly charged that it has secretly tried
to acquire nuclear arms. But the I.A.E.A. has so far found no signs of
a relationship with Dr. Khan or a clandestine nuclear weapons program.

Worried about what is still unknown, the I.A.E.A. is quietly setting
up what it calls the Covert Nuclear Trade Analysis Unit, agency
officials disclosed. It has about a half dozen specialists looking for
evidence of deals by the Khan network or its imitators.

"I would not be surprised to discover that some countries pocketed
some centrifuges," Dr. ElBaradei said. "They may have considered it
a chance of a lifetime to get some equipment and thought, 'Well, maybe
it will be good for a rainy day."'