Is there any famous protocol that were proven secure but whose proof was wrong and lead to real world attacks?
Posted by Léo Colisson, at crypto.stackexchange.com,
Are there moderns (post World War II) and famous protocols that were proven secure (in any model: game-based, UC...) but whose…