18.2 Long-term security
In his famous book The Cathedral and the Bazaar [144], the American software developer and open-source advocate Eric Raymond coined the phrase that ”given enough eyeballs, all bugs are shallow”. Raymond used the phrase – which later became known as the Linus Law in honor of Linus Torvalds – to highlight the benefits of the open-source development model, where the peer review conducted by a large developer community is very effective in identifying and fixing software bugs.
As discussed in Chapter 14, Block Ciphers and Their Modes of Operation, the AES algorithm was chosen in a worldwide public contest where the entire cryptographic community was able to submit their own proposals and find cryptographic flaws and weaknesses in others. The candidates’ algorithms were scrutinized by dozens of world-class cryptographers and leading experts in their respective sub-fields, and this type of contest for selecting cryptographic...