When it comes to designing new PKI-based key-exchange protocols, why are security proofs needed? Without them, can we show a protocol's security? Does there exist a PKI-based key-exchange protocol that is secure without a security proof?
And now i'm doing on security proofs. it's a tough thing for me. could anyone who is familiar in this field give me some advice? where do i begin? Could you recommend some fundamental materials for me to read? thanks a lot.