Now, instead of attracting people with genuine interest in information systems security, this industry has swarms of people chasing six-figure incomes. Well, that’s a trickier problem, but given the prevalence of information security conferences these days, I don’t see why a regular gathering of speakers and elders in the community couldn’t gather informally to determine these qualifications. I realize that this traditionally means bypassing the cryptographic algorithm and attacking a vector that is much less secure, such as key exchange mechanisms, but it’s still interesting, to me, to hear about how effective the mathematics behind the cryptography are at a particular point in time.