Schneier's Law

From Wikipedia, the free encyclopedia

In computer security, Schneier's Law refers to a statement made by Bruce Schneier in his book Applied Cryptography, explaining why security through obscurity fails. The law effectively claims that a security system whose design remains secret itself is not necessarily secure.

The term "Schneier's Law" was coined by Cory Doctorow in his speech about Digital Rights Management for Microsoft Research.^[1] The law is phrased as:

“

Any person can invent a security system so clever that she or he can't think of how to break it.

”

[edit] See also

• Bruce Schneier
• Security through obscurity
• Full disclosure

[edit] References

1. ^ Cory Doctorow (2004-06-17). Microsoft Research DRM talk. Retrieved on 2006-12-31.