APlausibleApproachtoComputer-aidedCryptographicPro.pptVIP

June 2005 A Plausible Approach to Computer-aided Cryptographic Proofs Shai Halevi The Problem Crypto proofs are hard to verify Many (most?) published proofs aren’t read by anyone other than the author Even proofs for “important” schemes are often not fully verified Errors in proofs happen Usually in some itty-bitty detail in this side remark at the bottom of page 27 Sample Arguments “We now make several changes to the order in which variables are chosen in game R1. We make the following changes to the code: […] Instead of choosing MMs?{0,1}n and setting Csm?Psm?MMs, we choose Csm?{0,1}n and