<\/span><\/h2>\nApplied to cryptographic procedures <\/strong>and principles of IT security, Kerckhoff’s principle means that it must be irrelevant whether an attacker knows an algorithm implemented in an algorithm. It follows from this: If the attacker knows the cryptographic algorithm and the cryptographic procedure nevertheless effectively protects the secret protected with it, both the secrets are protected and the cryptographic procedure used can be considered secure.<\/p>\nThis also applies to cryptographic procedures:<\/p>\n
All crypto functions may be publicly known as long as the secret key is effectively protected. Kerkhoff’s principle is therefore based on the protection of cryptographic keys, not on the protection of cryptographic algorithms<\/strong> or crypto functions<\/strong>.<\/p>\n<\/div>