Another Look at Provable Security

  • Alfred Menezes
Conference paper

DOI: 10.1007/978-3-642-29011-4_2

Volume 7237 of the book series Lecture Notes in Computer Science (LNCS)
Cite this paper as:
Menezes A. (2012) Another Look at Provable Security. In: Pointcheval D., Johansson T. (eds) Advances in Cryptology – EUROCRYPT 2012. EUROCRYPT 2012. Lecture Notes in Computer Science, vol 7237. Springer, Berlin, Heidelberg


Many cryptographers believe that the only way to have confidence in the security of a cryptographic protocol is to have a mathematically rigorous proof that the protocol meets its stated goals under certain assumptions. However, it is often difficult to assess what such proofs really mean in practice especially if the proof is non-tight, the underlying assumptions are contrived, or the security definition is in the single-user setting. We will present some examples that illustrate this difficulty and highlight the important role that old-fashioned cryptanalysis and sound engineering practices continue to play in establishing and maintaining confidence in the security of a cryptographic protocol.

Download to read the full conference paper text

Copyright information

© International Association for Cryptologic Research 2012

Authors and Affiliations

  • Alfred Menezes
    • 1
  1. 1.Department of Combinatorics & OptimizationUniversity of WaterlooCanada