"If you think cryptography can solve your problem, you don’t understand your problem and you don’t understand cryptography." — Roger Needham
That sentence, attributed in the source material to Roger Needham, is the origin point for a phrase that has moved from technical critique into a piece of popular performance. The line appears in the source as Needham’s phrasing and then reappears in altered forms: first as a version adapted by the blog author in the preface to a 2000 book titled Secrets and Lies, and later as a version quoted by Laurie Anderson on a recent album and in interviews.
Laurie Anderson quoting the line on a new album and in interviews
The source reports that Laurie Anderson quotes a version of the line in one of the tracks of her new album and that she has been reciting the quote in performances for years. In an interview cited in the source, Anderson describes an advertisement as “ridiculous, outrageous, blah, blah, blah,” then says, “my favorite quote on this is from a cryptologist who said, ‘If you think technology will solve your problems, you don’t understand technology and you don’t understand your problems.’” The source also notes that people have told the author that Anderson has been reciting this quote in performances for some time.
The 2000 adaptation in Secrets and Lies
The blog author recounts having modified the original Needham line in the preface to the 2000 book Secrets and Lies. The adapted sentence, as written in that preface and quoted in the source, reads: “If you think technology can solve your security problems, then you don’t understand the problems and you don’t understand the technology.” The author admits a lapse of attribution in that publication, writing, “I can’t tell you why me in 2000 didn’t credit Needham by name. I should have.”
How the wording shifted over time
The source traces a small evolution in the sentence across usages. The Needham original targeted “cryptography”; the 2000 preface targeted “technology” solving “security problems”; and the form Anderson uses — and the version the author now says he commonly uses — reads: “If you think technology will solve your problem, you don’t understand your problem and you don’t understand technology.” The author notes stylistic variants he has used over time: singular versus plural (“the problem” vs. “problems”), and sometimes ending with a more compact final word — “technology” — because “the quote flows better ending with just the word ‘technology.’”
What this means for cryptologists, performers, and readers
- Cryptologists and security practitioners: The source shows a line that began as a pointed technical caution by Roger Needham migrating into broader cultural usage. Practitioners who trace ideas across disciplines may see an opportunity to revisit the concept as it’s rephrased outside technical literature.
- Performers and audiences: Laurie Anderson’s use of the line on an album and in performances illustrates how a concise technical aphorism can be repurposed for artistic commentary; audiences hearing the line in that context may not encounter the original attribution unless it’s explicitly provided.
- Authors and readers mindful of attribution: The author’s own admission — “I should have” credited Needham in 2000 — underlines the practical consequences of citation choices: a memorable line can take on independent life, and tracing its origin requires deliberate crediting when an author adapts another’s phrasing.
The arc recorded in the source is simple but telling: a quip by Roger Needham about the limits of cryptography was adapted in a book preface, then shortened in common use, and has now surfaced in popular performance through Laurie Anderson’s work and interviews. Across those steps the phrasing has shifted, the target word moved from “cryptography” to “technology,” and the public attribution has blurred — a process the author candidly acknowledges by saying he “should have” credited Needham in 2000. The specific next question the record leaves standing is practical and local to the accounts offered: will future uses of this phrasing restore Needham’s name when the line is repeated in culture, or will the condensed phrasing continue to travel unattributed?
https://www.schneier.com/blog/archives/2026/05/laurie-anderson-is-quoting-me.html
