5 ms·
Yeah, that's Kerckhoffs' principle: > "A cryptosystem should be secure even if everything about the system, except the key, is public knowledge"
by asperous 10y ago
Yeah, that's Kerckhoffs' principle:
> "A cryptosystem should be secure even if everything about the system, except the key, is public knowledge"
- prodigal_erik 10y agoBut real world systems have simple defects that can be exploited without breaking a cryptographic algorithm.
- jasonpeacock 10y agoThen it's not secure. Security is about the whole system, not just the crypto algo being used. It's defense in depth, not security through obscurity.
- prodigal_erik 10y agoDefense in depth is stacking several flawed defenses hoping no attacker is aware of enough flaws to get through all of them. If any of the defenses were actually secure you wouldn't need the others. But we as an industry can't yet make anything secure.