{"id":550534,"date":"2026-07-30T02:29:10","date_gmt":"2026-07-30T02:29:10","guid":{"rendered":"https:\/\/www.newsbeep.com\/nz\/550534\/"},"modified":"2026-07-30T02:29:10","modified_gmt":"2026-07-30T02:29:10","slug":"mythos-attack-on-3rd-round-pqc-algorithm-candidate-puts-it-out-of-commission","status":"publish","type":"post","link":"https:\/\/www.newsbeep.com\/nz\/550534\/","title":{"rendered":"Mythos attack on 3rd-round PQC algorithm candidate puts it out of commission"},"content":{"rendered":"<p>Mythos helped to find a new meet-in-the-middle technique that relies on a <a href=\"https:\/\/www.tandfonline.com\/doi\/full\/10.1080\/17513472.2017.1419331\" rel=\"nofollow noopener\" target=\"_blank\">M\u00f6bius Bridge<\/a>, a more sophisticated fingerprinting algorithm used in meet-in-the-middle attacks. Using it, Green said, the code Mythos produced was able to reduce the number of required inputs to 289. Anthropic said that savings can reduce the time required for such attacks by 200- to 800-fold.<\/p>\n<p>The ability to produce that many inputs makes the attack beyond reach outside of the laboratory. Further, the actual speed-up is unknown, since the weakened AES algorithm tested used only 7 rounds. Specification-compliant AES, Green said, uses 10, 12, or 14 rounds, depending on key size.<\/p>\n<p>Anthropic is careful to explicitly spell out most of these caveats. The Monday blog post goes on to argue, however, that the results are nonetheless meaningful and could ultimately fundamentally disrupt the process of cryptanalysis, or the adversarial testing of cryptosystems.<\/p>\n<p>\u201cThe cybersecurity community is now grappling with the fact that language models are able to discover so many bugs that the standard human processes (like vulnerability triage, verification, and remediation) struggle to keep up,\u201d Anthropic wrote. \u201cWe predict that the same will soon be true in academic cryptography research. As language models increasingly produce novel research outputs autonomously, human researchers may become bottlenecked on studying and validating these results for technical validity, novelty, and utility.\u201d<\/p>\n<p>Not mentioned in Anthropic\u2019s report is whether its researchers used Mythos to attack more tested cryptosystems, such as elliptic curve cryptography and RSA. Attack improvements against these systems would be more impressive. By achieving the most impressive result against an algorithm still in its infancy, it\u2019s not clear how much of an advantage Mythos truly provided. There\u2019s no way of knowing if researchers using conventional cryptanalysis techniques were already close to discovering the same attack.<\/p>\n<p>Ultimately, the lesson from the research is simple. AI-assisted cryptanalysis remains untested, and providers of these platforms have a vested interest in exaggerating their benefits. At the same time, there\u2019s growing evidence that LLMs may provide significant advantages in finding cryptographic weaknesses. It would be a mistake to conclude that LLMs won\u2019t one day play an important role in the race between securing and compromising our most vital assets.<\/p>\n<p>The headline and body of this story have been updated to reflect the withdrawing of HAWK.<\/p>\n","protected":false},"excerpt":{"rendered":"Mythos helped to find a new meet-in-the-middle technique that relies on a M\u00f6bius Bridge, a more sophisticated fingerprinting&hellip;\n","protected":false},"author":2,"featured_media":550535,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[20],"tags":[365,363,364,111,139,69,145],"class_list":["post-550534","post","type-post","status-publish","format-standard","has-post-thumbnail","category-artificial-intelligence","tag-ai","tag-artificial-intelligence","tag-artificialintelligence","tag-new-zealand","tag-newzealand","tag-nz","tag-technology"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/posts\/550534","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/comments?post=550534"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/posts\/550534\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/media\/550535"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/media?parent=550534"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/categories?post=550534"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/tags?post=550534"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}