Dispelling Myths on Superposition Attacks: Formal Security Model and ...