Hacker News new | past | comments | ask | show | jobs | submit login

How those additional layers are defined is quite important as to their effectiveness - do they hold up to scrutiny, or are they merely good enough to trick their designer? Lumping effective crypto along with feel-good ad-hoc schemes into one big category of "obfuscation" is a disservice to analysis.

I'll repeat - Kerckhoffs's principle is more about analysis than design. If you insist on eschewing it, what you're actually doing is making it so the "key" of your system includes the design of the system itself. And while it intuitively seems "more key" should make the system more secure, the net effect is the opposite as that poorly-specified "key" merely functions as a difficult-to-analyze crutch.

Gödel basically guarantees that anybody can make a cryptosystem so secure they themselves cannot break it. Don't be that guy.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: