Skip to main content
2 of 5
added 109 characters in body
Neil Slater
  • 1.1k
  • 8
  • 20

When did Kerchoff's principle become fully accepted in design and practice of modern ciphers?

Kerchoff's principle is named after a publication over 130 years old. Yet it is still something that is commonly misunderstood and challenged by newcomers to cryptography. This question from Open Source Stack Exchange seems typical, and one answer to it implies that at some point, cryptographers in general "got it" and it has become a cornerstone of modern cipher design.

This seemed interesting to me - was the principle for Kerchoff's original paper (originally design principle 2 from a list of 6 according to Wikipedia) broadly accepted from the moment of publishing, or has it taken time, specific events and/or the failure of many electronic designs before attaining its current importance?

I searched for "violations of Kerchoff's principle" and found a few modern examples (e.g. MiFare being hacked), where essentially the cipher was weak - and easily understood to be weak at the time it was made - but kept secret in the vain hope that reverse-engineering it would be too much of a challenge. However, I didn't find anything I could relate to history such as a series of "secret" ciphers failing badly in the 1990s for instance. So I'm starting to think the principle really has been well-understood ever since it was published, just not followed in practice by some institutions that should have known better had they asked any cryptanalyst. Therefore one way re-framing my question might be "Has there ever been a time in modern (computer-based) cryptographic practice where Kerchoff's principle was not considered as important as it is today?"

Neil Slater
  • 1.1k
  • 8
  • 20