If it's Provably Secure, It Probably Isn't: Why Learning from Proof Failure is Hard

Ross Anderson, Nicholas Boucher

In this paper we're going to explore the ways in which security proofs can fail, and their broader lessons for security engineering. To mention just one example, Larry Paulson prov…