Auguste Kerckhoffs stated in 1883 that security should not depend on the secrecy of the algorithm—only on the secrecy of the key.
Modern Application
- Open-source crypto libraries (AES, RSA) are more trusted than proprietary ones
- 'Security through obscurity' is an anti-pattern
- API keys and secrets should be the only protected element, not the code itself
This principle underpins the entire modern security industry and directly opposes the misconception that closed-source software is inherently more secure.