Problem 4: Secret keys often aren’t so secret
Cryptosystems depend on the notion of a secret parameter, called a key
Implicit assumptions:
- keyspace is large enough to make exhaustive search for correct key infeasible
- key is really, truly, honestly random
- key is kept secret from bad guys
Weaknesses here are surprisingly common