Which of the following is not a principle of Kerchoff?

The secret key can't be guessed by the attacker

Any key can be used and changed without replacing our cryptosystem

All security rests in a secret key

Threats are assumed to be familiar with how our cryptography works