加密并不等于安全这种说法,我们不能太经常挂在嘴边。这种说法仅仅是系统级安全策略的一个组成部分(表1)。而且这种策略的包罗万象的内容还多少是一种商业考虑,它力图使保护数据所花的费用和数据万一泄露所需付出的代价达到某种平衡。毕竟,我们不会用一把10万美元的车锁去保护一辆300美元的自行车吧。 Encryption does not mean that this is safe, we can not talk too often. This is just an integral part of the system-wide security strategy (Table 1). And the all-encompassing nature of such a strategy is a matter of business concern, and it seeks to strike a balance between the cost of protecting the data and the costs of compromising the data. After all, we will not protect a $ 300 bike with a $ 100,000 lockup.