Certified in Theory, Broken in Practice: Assumption Gaps in Cryptographic Model