Yahoo Answers is shutting down on May 4th, 2021 (Eastern Time) and beginning April 20th, 2021 (Eastern Time) the Yahoo Answers website will be in read-only mode. There will be no changes to other Yahoo properties or services, or your Yahoo account. You can find more information about the Yahoo Answers shutdown and how to download your data on this help page.

Is "open source encryption" an oxymoron?

If we know the source code of a program, what is there left that we don't know? (wouldn't know the source code tell you exactly what a program does without exception?)

If there's anything we cannot know from looking at the source code of an algorithm, what good is the source code?

How does an encryption program work if its source code is open for review, and how does one know that it DOES work, if the source code can be reviewed, but something is left unknown?

Update:

How can a private key, or password, be kept secret if the program is open source, or what good is the source if something is still unknown?

If the private key is manually created by somebody outside of the program, wouldn't the program need to know how to handle it? (and wouldn't one know if he had the source code)

3 Answers

Relevance
  • 10 years ago
    Favorite Answer

    The encryption uses two keys. The public key is known to all. But the private key or in layman terms, the password, is kept secret. This private key is needed also for decryption of the program, a key that not everyone knows. Hence open source encryption is not an oxymoron.

  • 10 years ago

    When a file is encrypted, you need a key to actually decrypt it. Knowing the source code and algorithms is not enough and doesn't actually help you break the encryption.

  • 10 years ago

    Yes, I would say so.

Still have questions? Get your answers by asking now.