[Info-vax] What to do with my VAX.....

[Dave Froble]

On 11/16/2020 3:38 AM, Phillip Helbig (undress to reply) wrote:
> In article <rot4rj$onr$1 at dont-email.me>, Dave Froble
> <davef at tsoft-inc.com> writes:
>
>> I'm not saying that an attacker doesn't know the algorithm, I'm saying
>> the attacker does not know the secret key.  But, however unlikely, an
>> attacker could "guess" the secret key on his first try.  It is the fact
>> that an attacker doesn't know the secret key is the "obscurity" aspect
>> of the security.  Since an attacker could get incredibly lucky and guess
>> the secret key on his first attempt, then it is only the difficult of
>> that guess that is the security.
>
> Right.  I think that folks here understand.  However, the term "security
> by obscurity" has a very specific meaning, and it is confusing to use it
> to mean something else.
>
> By your definition, all forms of access restriction are "security by
> obscurity", since those who have access have it because they have
> something which those who don't don't, though they could, theoretically,
> bluff their way through and get lucky.
>

I was just agreeing with Roland's statement, "ALL ENCRYPTION is security 
by obscurity".

-- 
David Froble                       Tel: 724-529-0450
Dave Froble Enterprises, Inc.      E-Mail: davef at tsoft-inc.com
DFE Ultralights, Inc.
170 Grimplin Road
Vanderbilt, PA  15486