Editing Snake oil (cryptography) (section)

{{Short description|Fraudulent cryptography claim}}
{{Use dmy dates|date=February 2025}}

In [[cryptography]], '''snake oil''' is any cryptographic method or product considered to be bogus or fraudulent. The name derives from [[snake oil]], one type of [[patent medicine]] widely available in 19th century United States.

Distinguishing secure cryptography from insecure cryptography can be difficult from the viewpoint of a user. Many cryptographers, such as [[Bruce Schneier]] and [[Phil Zimmermann]], undertake to educate the public in how secure cryptography is done, as well as highlighting the misleading marketing of some cryptographic products.

The ''Snake Oil FAQ'' describes itself as "a compilation of common habits of snake oil vendors. It cannot be the sole method of rating a security product, since there can be exceptions to most of these rules. <nowiki>[...]</nowiki> But if you're looking at something that exhibits several warning signs, you're probably dealing with snake oil."<ref name="snakeoilfaq">{{cite web|archiveurl=https://web.archive.org/web/20211114090731/http://www.interhack.net/people/cmcurtin/snake-oil-faq.html|first1=Curtin|last1=Matt|title=Snake Oil Warning Signs: Encryption Software to Avoid|url=http://www.interhack.net/people/cmcurtin/snake-oil-faq.html|archivedate=14 November 2021}}</ref>