The law under which Kiriakou was convicted, the Intelligence Identities Protection Act, had not yielded a conviction in 27 years.