Anthropic's locked Mythos model just found a real weakness in a NIST post-quantum signature finalist

[Wrench]

Anthropic published research today saying an unreleased version of Claude, internally called Mythos Preview, found two previously unknown attacks on cryptographic schemes, and one of them lands directly on HAWK, a lattice based signature scheme that is currently the last one standing in NIST's third round post quantum signature competition

The actual math is the interesting part, Claude found a symmetry inside HAWK that no human researcher had spotted, and for the smallest key configuration it dropped the cost of recovering a secret key from 2 to the 64 operations down to 2 to the 38, that is roughly 67 million times less work than anyone thought was required

The fix is straightforward on paper, just double the key size, but Anthropic's own writeup admits that doing so wipes out most of what made HAWK attractive in the first place, compact keys and fast signing were its whole pitch against the other post quantum candidates, and blockchains in particular care about signature size because it eats directly into block space and fees

To be clear nobody needs to panic about their coins, HAWK has never actually been deployed anywhere and Bitcoin still runs on ordinary ECDSA, this is a competition candidate getting knocked around before it ever reaches production, which is honestly the best possible time for this kind of flaw to surface

The second result is arguably the more interesting story about how the model actually works, researchers targeted a 7 round research version of AES, blocked it from using all five known families of attack technique, and told it to invent a sixth, the model initially refused outright and said there was nothing easy to find on the most studied block cipher in existence, which is a pretty striking moment of an AI correctly assessing that a problem was genuinely hard rather than just guessing

It only cracked it after researchers pushed back a few times over several days, eventually producing something called a Mobius Bridge that eliminates one of the nine key bytes an attacker previously had to guess, that alone beat a record cryptographers had held since 2013, and it took roughly a billion output tokens and several hundred hours of human verification afterward just to confirm the result was real

Claude Mythos Cracked Post-Quantum Cryptography That Humans Spent Years Failing to Break - Decryptdecrypt.co