full-disclosure - New paper on Security and Obscurity

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: stephane.nasdrovisky at paradigmo.com (stephane nasdrovisky)
Subject: New paper on Security and Obscurity

This not so new info may bring some lights : 
http://www.fact-index.com/a/au/auguste_kerckhoffs.html : "... the 
security of a cryptosystem must depend only on the key, not on the 
secrecy of any other part of the system."

Peter Swire wrote:

>?full disclosure? and computer security:
>
>	http://papers.ssrn.com/sol3/papers.cfm?abstract_id=531782
>
>	The paper begins by analyzing the
>clich? that ?there is no security through obscurity.?  It observes that the
>traditional military and intelligence clich? is that ?loose lips sink
> ships.?
>  
>