A note about Kerckhoff's Principle
Jun 19, 2012John Graham-Cumming
Summary
This post introduces and explains Kerckhoff's Principle, emphasizing that security systems should rely on the strength of their algorithms and the secrecy of keys, not on the obscurity of their design. It applies this principle to Cloudflare's password storage practices, highlighting the use of bcrypt and random salts as secure methods that do not require secrecy of the system's details.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack