The real lesson for security leaders is simpler and harsher: cryptography can fail in more than one way, so understanding the main attack classes is part of basic defense.