At a product level, yes. The Common Criteria SKPP certification process explicitly required the operating system under evaluation to be impervious to the NSA pe

At a product level, yes. The Common Criteria SKPP certification process explicitly required the operating system under evaluation to be impervious to the NSA penetration testers evaluating the system with full access to the source code and formal specification [1]. You can see the specific requirement I am mentioning on page 117. This certification process was successfully completed for the INTEGRITY-178B operating system before the NSA allowed its use in the critical flight and weapon systems of the networked F-22 and F-35 fighter jets. This is the same operating system in use on modern F-16, B1-B and B2 intercontinental nuclear bombers, Boeing 787 and Airbus A380. As to the question of commercial IT systems. Haha, not a chance in hell. Every Fortune 500 company, yes the tech companys included, is on the order of 1 M$ for complete compromise. You need to add another two or three zeroes to actually present a credible roadblock. [1] https://www.niap-ccevs.org/MMO/PP/pp_skpp_hr_v1.03.pdf#page117 https://www.niap-ccevs.org/MMO/PP/pp_skpp_hr_v1.03.pdf#page1...