2.1.39 Kerckhoffs假设Kerckhoffs' assumption/principle