The underlying hard problems
We can’t prove much of anything
- almost all ciphers and security protocols are built on a foundation of unproven assumptions
- but that doesn’t (usually...) bother us in practice
More serious is that the security model provided by crypto isn’t always right
- Sometimes solves slightly different problem
- Sometimes based on incorrect trust assumptions