arXiv: Certified in Theory, Broken in Practice: Assumption Gaps in Cryptographic Model Certification

This paper, published on arXiv in July 2026, presents a critical analysis of cryptographic model certification within the AI safety framework. It argues that current certification processes for cryptographic models—which underpin secure communications, data integrity, and AI system verification—contain fundamental assumption gaps. Specifically, the authors demonstrate that theoretical proofs of security often fail to account for real-world implementation constraints, such as side-channel attacks, hardware vulnerabilities, and operational misuse. This means that a model certified as secure under laboratory conditions may be broken in practice, undermining the trust placed in certified cryptographic systems.

The primary organizations affected are those in highly regulated sectors that rely on certified cryptographic models for compliance, including financial services, healthcare, telecommunications, and critical infrastructure operators. Additionally, AI developers and cloud service providers that use cryptographic attestation for model integrity or data privacy will need to reassess their certification dependencies. Regulators and standards bodies, such as ENISA and national cybersecurity agencies, should also take note, as the paper challenges the validity of existing certification benchmarks.

Compliance teams should immediately review their current cryptographic certification inventories and identify any models certified under the assumptions critiqued in the paper. They should engage with their security engineering teams to conduct practical penetration testing and side-channel analysis on these certified models, rather than relying solely on theoretical proofs. Finally, teams should monitor for updated guidance from regulatory bodies and consider requiring vendors to provide evidence of real-world robustness testing as part of procurement and compliance audits.