I'm surprised nobody has mentioned Koblitz and Menezes in this thread. Unfortunately, the mathematical literature is littered with insecure, but "provably secure," cryptosystems.

[1] http://anotherlook.ca/ [2] http://www.ams.org/notices/201003/rtx100300357p.pdf