Provable Security in the Real World

Abstract

Provable security is sometimes portrayed as having revolutionized cryptography, transforming it from an art into a science. Three decades after its inception, is this transition complete? Are cryptanalysts out of business? If so, why do we still hear about attacks against real-world cryptographic systems?