Revisiting Threat Models for Cryptography (Y32a).