The book Foundations of Cryptography states:
It was understood that problems related to breaking a 1-1 cryptographic mapping could not be NP-complete and, more important, that NP-hardness of the breaking task was poor evidence for cryptographic security.
But I thought the whole point of complexity theory was to determine which problems were NP so that we might be able to use the infeasibility of their solutions to produce security?