A heuristic-based construction gains security confidence from cryptanalysts’ observations and statistical analysis rather than from a formal mathematical hardness assumption. AES is a familiar example: its design appears to withstand analysis, while its security is not framed around problems such as factoring. section 1.5
Use the classification as a practical comparison, not a rigid taxonomy:
- Symmetric constructions are most often heuristic-based and are often faster than mathematical constructions. section 1.5
- Mathematical constructions rely on problems believed to be hard; RSA illustrates this category. section 1.5
- Because classifications vary and are difficult to make rigorous, examine each primitive’s security claims before combining it into a protocol. section 1.5
