I often encounter the phrase "I am not a cryptographer". Is there a generally accepted definition for who is a cryptographer? What qualifications would be expected?
For instance, should that person be expected to hold a relevant degree, or to have published $N$ papers?
Alternatively, would someone performing cryptanalysis or analysis of cryptographic protocols in a professional capacity be considered a "cryptographer", even without the academic background?
I had a similar conundrum myself when I accepted a position doing very crypto-specific engineering work in industry. They asked me what my title should be, and I didn't really know. I asked my undergrad advisor and he said, effectively, that someone who
is a cryptographer. Cryptographers also publish attacks from time to time, but most people would call an attack-focused researcher a 'cryptanalyst'.
In my mind, the important difference between a cryptographer and someone who otherwise works in security is precision in definitions and arguments.
I should state, though, that this distinction is rarely useful in practice, because really good ideas can come from pretty much anywhere. Don't get hung up on terminology.
