"Security by Obscurity is when you hide how a security measure works, not when you keep some part of it a secret." This is the net opposite of what Kerckhoff te

"Security by Obscurity is when you hide how a security measure works, not when you keep some part of it a secret." This is the net opposite of what Kerckhoff tells us. Very wrong. Let me quote Bruce Schneier on this: "If I hide $1million in a safe and hide the safe somewhere in the subway in New York, that's obscurity. If I do the same but hand you the safe right away and ask you to open it without the key, that's security". Nobody cares about whether your solution is buggy. If you assume any security based on the inability to learn something about the WORKINGS of it its broken (or more precisely just overhead because it's as good as nothing). You can only model that based on the inability to learn DATA (like a key/password).