
Dorothy Denning, _Cryptography and Data Security_, 1982, Addison Wesley.
Page 8, under the heading "Cryptosystems must satisfy three general
requirements.  The other two are efficiency and ease of use.