Obscurity is Not Security

Use proven security measures

The design itself is what provides the security, not the secrecy of the design. Publicly accepted encryption standards are an excellent example of open design. The details of these encryption algorithms are publicly available. Despite this, several publicly disclosed algorithms can provide excellent security when implemented correctly.

Note: Open design exposes the algorithm to a rigorous evaluation by experts in the field. It also enables greater trust, as the community can ascertain that there are no hidden trapdoors in the design.

Hide information

Even though obscurity itself shouldn’t be considered a complete solution, a security strategy should make the attacker’s job as difficult as possible. The cost of obtaining the objective should exceed its value.