�y��vlog

The cryptosystem designers hadn’t imagined that an attacker would take that approach, so their system was vulnerable to it.

The same issues arise in cryptography, where we would like to argue that a given cryptosystem is hard to break not merely in the worst case but for most choices of random key.

This project has already released recommendations54 of such confidence-inspiring systems for users who can afford them, such as AES-256, McEliece’s code-based cryptosystem and hash-based signatures.

Whether the cryptosystem is secure is a different question.

A cryptosystem based on a random one is virtually impregnable and hence protects our privacy.