Limitations of End-to-End Encryption in Secure Computer Networks
M.A. Padlipsky, D. W. Snow, Paul A. Karger · 1978
End-to-end encryption is not sufficient to prevent compromise of information in a network that employs untrusted subnet (network interface) processors. Addresses, message lengths, and timing of transmissions furnish channels whose bandwidth can be significant.