Proven security for the untrusted cloud