Kerckhoffs's Principle

Kerckhoffs’s principle says a cryptographic system should remain secure even when its design and operation are fully known; only the key should need to stay secret. Auguste Kerckhoffs formulated this idea in 1883, amid the growth of military telegraphy and the need for practical field ciphers. His broader design rules called for systems that were usable, portable, and safe to capture. The enduring rule shifts the burden of protection from concealing an entire system to safeguarding a small, changeable secret. Claude Shannon later expressed the same assumption as “the enemy knows the system.”

The principle is practical because system designs can be exposed through espionage, captured equipment, software analysis, or hardware inspection. If security depends on hiding a widely distributed algorithm, disclosure can force costly replacement and redistribution; if security depends on keys, compromised keys can simply be replaced. The principle also favors open analysis: public scrutiny can uncover weaknesses and improve designs, while secrecy may hide flaws and delay repairs. This stands against security through obscurity, though secret government or military algorithms may still serve as one layer of defense rather than the sole basis for security. More generally, limiting the number and complexity of secrets reduces failure points and makes a system easier to maintain when something is exposed.