3 ms·
But real world systems have simple defects that can be exploited without breaking a cryptographic algorithm.
by prodigal_erik 10y ago
But real world systems have simple defects that can be exploited without breaking a cryptographic algorithm.
- jasonpeacock 10y agoThen it's not secure. Security is about the whole system, not just the crypto algo being used. It's defense in depth, not security through obscurity.
- prodigal_erik 10y agoDefense in depth is stacking several flawed defenses hoping no attacker is aware of enough flaws to get through all of them. If any of the defenses were actually secure you wouldn't need the others. But we as an industry can't yet make anything secure.