Another Look at "Provable Security"

  • Authors:
  • Neal Koblitz;Alfred J. Menezes

  • Affiliations:
  • Department of Mathematics, Box 354350, University of Washington, Seattle, WA 98195, USA;Department of Combinatorics & Optimization, University of Waterloo, Waterloo, Ontario, N2L 3G1, Canada

  • Venue:
  • Journal of Cryptology
  • Year:
  • 2007

Quantified Score

Hi-index 0.01

Visualization

Abstract

We give an informal analysis and critique of several typical "provable security" results. In some cases there are intuitive but convincing arguments for rejecting the conclusions suggested by the formal terminology and "proofs," whereas in other cases the formalism seems to be consistent with common sense. We discuss the reasons why the search for mathematically convincing theoretical evidence to support the security of public-key systems has been an important theme of researchers. However, we argue that the theorem-proof paradigm of theoretical mathematics is often of limited relevance here and frequently leads to papers that are confusing and misleading. Because our paper is aimed at the general mathematical public, it is self-contained and as jargon-free as possible.