I'm surprised nobody has mentioned Koblitz and Menezes in this thread. Unfortunately, the mathematical literature is littered with insecure, but "provably secur

I'm surprised nobody has mentioned Koblitz and Menezes in this thread. Unfortunately, the mathematical literature is littered with insecure, but "provably secure," cryptosystems. [1] http://anotherlook.ca/ http://anotherlook.ca/ [2] http://www.ams.org/notices/201003/rtx100300357p.pdf http://www.ams.org/notices/201003/rtx100300357p.pdf