2 ms·
Good encryption systems assume that the algorithm is known and still are secure in face of that requirement. So if publishing the method makes your system insec
by Xylakant 13y ago
Good encryption systems assume that the algorithm is known and still are secure in face of that requirement. So if publishing the method makes your system insecure then it's already insecure by design. Security through obscurity is not a viable approach.
- eToThePiIPower 13y agoYes, good encryption/hashing assumes the algorithm is known, but we're also talking about the giving away the salt. The salt in a secure hash plays an analogous role to the secret key in an encryption cipher; both are assumed unknown by an attacker.