"most security failures in its area of interest are due to failures in implementation, not failure in algorithms or protocols"