Searching for a Solution: Engineering Tradeoffs and the Evolution of Provably Secure Protocols