[Cryptography] What to put in a new cryptography course

[Phillip Hallam-Baker]

Oh one thing to definitely cover is the fragility of formal proofs. Yes
formal proofs of security are good. But not if they force you to design the
system in a way that makes it less robust.

Classic example is one time pads. Yes they are 'provably secure' but
implementations of them are almost invariably less secure than systems
using AES.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.metzdowd.com/pipermail/cryptography/attachments/20160623/1c1dae7c/attachment.html>