🤪 Many Locks Are Better Than One

Why We Need Layered Security

In 10 minutes: Understanding defense in depth
Prerequisite: None

---

🎯 The Simple Story

Imagine you have a treasure chest with gold inside.

One lock:

📦 Treasure chest
🔒 One big padlock

Problem: If someone picks that lock, everything is gone!

Multiple locks:

📦 Treasure chest
🔒 Padlock
🔒 Combination lock
🔒 Key lock
🔒 Fingerprint lock
🔒 Voice recognition lock

Solution: Even if someone picks one lock, the other four still protect your gold!

---

🧠 Mental Model

Hold this picture in your head:

Russian Nesting Dolls (Matryoshka):

Doll 5 (smallest):
┌──────────────┐
│ Your secret  │
└──────────────┘
  ↓ Inside...
Doll 4:
┌──────────────┐
│ Shield 4     │
└──────────────┘
  ↓ Inside...
Doll 3:
┌──────────────┐
│ Shield 3     │
└──────────────┘
  ↓ Inside...
Doll 2:
┌──────────────┐
│ Shield 2     │
└──────────────┘
  ↓ Inside...
Doll 1 (largest):
┌──────────────┐
│ Shield 1     │
└──────────────┘

To steal the secret:
Eve must open Doll 1
Then Doll 2
Then Doll 3
Then Doll 4
Then Doll 5

If Eve breaks into Doll 1 or 2 or 3...
SHE STILL HAS DOLLS 4 AND 5 TO OPEN!

---

📊 See The Difference

One Lock vs. Many Locks

Scenario	One Lock	Many Locks
Eve breaks the lock	🔓 Eve wins!	🎭 Eve tried but 4 more to go!
Quantum computer comes	🔓 Eve wins!	🚫 Quantum breaks one, 4 safe
Alice loses phone	🔓 Eve wins!	🎭 Eve gets AES, still needs DH/Signal/MLS
Bug found in algorithm	🔓 Eve wins!	🎭 One layer compromised, others work

---

🎮 Try It Yourself

Question 1: Alice has 1 lock. Eve picks it. What happens?

Show Answer

Alice's treasure chest's only protection is that one lock. If Eve picks it, she opens the chest and steals Alice's gold. End of story.

---

Question 2: Alice has 5 locks (AES, DH, Signal, MLS, ML-KEM). Eve picks the first one (AES). What happens?

Show Answer This

Eve gets past lock 1 (AES)... but there are 4 more locks:

• Lock 2: DH (needs DH private key)
• Lock 3: Signal (needs double ratchet state)
• Lock 4: MLS (needs group secret)
• Lock 5: ML-KEM (needs ML-KEM private key)

Eve still needs to pick 4 more locks! Alice's gold is still safe!

---

Question 3: Why is picking one lock easier than picking five locks?

Show Answer

Because each lock adds difficulty:

• Lock 1: "Pick the padlock" (easy)
• Lock 2: "Crack the DH key exchange" (hard)
• Lock 3: "Break forward secrecy" (harder)
• Lock 4: "Break MLS group encryption" (harder)
• Lock 5: "Solve lattice problems" (hardest for quantum computers!)

Even if someone picks one, they still have four more to go. It's exponentially more difficult!

---

💡 Real-World Example: Secure Messaging App

Without cascading cipher (just AES):

App uses: AES-GCM-256
├─ Fast
├─ Simple
└─ Problem: No forward secrecy!

Scenario:
- Alice sends: "Account number: 123456"
- Eve steals phone
- Eve gets AES key
- Eve reads: "Account number: 123456"
- Eve steals money!

With cascading cipher (AES + Signal + MLS):

App uses: AES + Signal + MLS
├─ Slower but more secure
├─ Forward secrecy (keys deleted after use)
└─ Compromise resilience

Scenario:
- Alice sends: "Account number: 123456"
  - MLS encrypts → Signal encrypts → AES encrypts
- Eve steals phone
- Eve tries AES key
- Alice deletes Signal keys (forward secrecy)
- Alice deletes MLS keys (forward secrecy)
- Eve: I have AES but don't have Signal or MLS keys!
- Eve can't read: "Account number: 123456"
- Eve steals nothing!

---

✅ Quick Check

Can you explain why multiple locks are better than one lock to a 5-year-old?

Try saying this out loud:

"Imagine you want to hide your treasure. You could put one lock on a treasure chest. But if a thief picks that lock, they steal your treasure! What if you put FIVE locks instead? Even if a thief picks one lock, they still have four more to pick. It takes five times as long to steal your treasure!"

---

🎓 Key Takeaways

✅ Single layer = One lock, one point of failure
✅ Cascading layers = Multiple locks, defense in depth
✅ Compromise resilience = One broken, others still work
✅ Multiple use cases = Each layer protects differently
✅ Trade-off = More security, but slower and bigger

---

🎉 What You'll Learn Next

Now you understand why multiple layers matter! Let's explore what each layer does:

🧱 Continue: The Building Blocks

We'll learn about cipher layers - the building blocks of the cascading cipher system!

---

Now you know why many locks are better than one. Next: Understanding how cipher layers work!