5 ms·
> ...in defiance of a widely accepted cryptographic principle holding that obscurity is detrimental to security. Security isn't my field, but my understanding
by jszymborski 3y ago
> ...in defiance of a widely accepted cryptographic principle holding that obscurity is detrimental to security.
Security isn't my field, but my understanding is that this is a bit of a common misunderstanding re: Kerckhoff's Doctrine / Security through Obscurity.
The idea being that keeping something like a Cipher's algo secret is not necessarily detrimental to security, but that relying on obscurity to provide security rather than the merits of the algo is the problem.
Surely, opening the algo allows the community to audit it, but a group of experts sworn to secrecy can also do this (e.g. NSA's Suite A ciphers)
EDIT: I should add that opening TETRA is almost certainly a good idea if they can update it with help of the community.
- tommiegannert 3y agoIt's detrimental in the sense that it gives you a false sense of security (literally.) We have no idea how many people/states broke TETRA before one made it public. And there is no feedback mechanism to get to know it either. If the algorithm is out in the public, public research funding provides an incentive to publish findings, creating that missing feedback loop.