Acquire, and Sustain Secure Software, draft vers. 1.1 (Washington, DC: US CERT, August 31, 2006). A
subsequent version, draft vers. 1.1, dated April 2, 2007,
html?branch=1&language=1
217 The practice of openly exposing one’s design and algorithms to scrutiny is widely accepted in the