Principles
There exist many principles in information security. By principle I understand some general guidelines or best practices one should be aware of and apply when designing/implementing/configuring/etc. secure systems (You might sometimes find sources that refer to the components of the CIA Triad - see Crypt(?) - as principles; that is not what this post is about). I also use the term principle to follow the first in line: Kerckhoff's principle, which is maybe the most known principle in cryptology. The list is not exhaustive, but I think it is a good selection. Also, keep in mind that implementing one principle depends on the situation (goal, costs, trade-off with other aspects such as efficiency and usability, etc.). Kerckhoffs's principle is the second in a list of six principles specified by A.Kerckhoffs in his paper entitled La Cryptographie Militaire , published in 1883 [1]. The article is ...