{"slug": "notes-on-the-anthropic-cryptographic-blogpost", "title": "Notes on the Anthropic cryptographic blogpost", "summary": "Anthropic's Claude Mythos Preview discovered improved cryptographic attacks on the HAWK digital signature scheme and a weakened version of AES, with full research papers published. The HAWK attack requires doubling key sizes to maintain security, potentially eliminating the scheme's advantages as a post-quantum cryptography candidate, while the AES attack on a seven-round variant is 200 to 800 times faster than prior work. Both attacks, costing about $100,000 in API costs each, were developed with minimal human intervention and are not immediate threats to production systems.", "body_md": "*Status: Mostly a summary with some of my notes* *at the end. *\n\nAnthropic released [a blogpost](https://www.anthropic.com/research/discovering-cryptographic-weaknesses) yesterday (07/28/26) describing how Claude Mythos Preview found improved ways to attack some cryptographic algorithms. While neither of the attacks they describe are a current threat to any production systems, I do expect models to continue getting substantially better at this. I’m not any sort of cryptography expert though, and am not sure how much of a threat model this is. Two different attacks were covered in the blogpost, one against [HAWK](https://www-cdn.anthropic.com/e8d50c167ad47beeb03d6109a4a484be95cb38ea/hawk_key_recovery.pdf), and one against a weakened version of [AES](https://www-cdn.anthropic.com/c88771e1bf5ee8885349eed05e5484c0e5f7e02b/aes_mobius_bridge.pdf), with full research papers available (see prior links).\n\nHAWK is the result that’s more actively helpful/valuable. HAWK is one of nine remaining candidates as part of the NIST call for [Additional Digital Signatures](https://csrc.nist.gov/projects/pqc-dig-sig/round-3-additional-signatures), an effort to standardize new [Post-Quantum Cryptographic](https://csrc.nist.gov/Projects/post-quantum-cryptography/post-quantum-cryptography-standardization) (PQC) schemes, something that’s important as building a cryptographically-relevant quantum computer becomes closer to possible, threatening classical cryptography. The attack Mythos discovered means that one would need to double the size of HAWK keys to achieve the same level of security, which eliminates many of the reasons making HAWK a good PQC signature candidate. It was the only lattice-based candidate remaining, although three of the five main PQC standardizations are lattice-based.\n\nTo find it, Anthropic used a Claude Code-like harness that supports multiple agents in a sandboxed environment. A human operator ran the experiment, but did not have particularly relevant cryptographic expertise, input was limited to project management. They mention the multi-agent workflow was valuable and the key idea in producing this attack was discovered by a pair of agents working together. Finding, developing and verifying the attack took about 60 hours and $100k in API cost.\n\nThe second result was on a weaker version of[ AES](https://www.nist.gov/publications/advanced-encryption-standard-aes), a commonly used/scrutinized encryption algorithm that was adopted in 2001. AES-128 encrypts an input by repeatedly applying a round function, normally having ten rounds. Their research works on a modified version that has seven of the ten rounds, and this sort of work is common academically to learn about attack techniques that could generalize to the full cipher later.\n\nMythos developed an improved attack that extends previous research, resulting in an attack between 200 and 800 times faster than prior works, dependent on a fingerprinting algorithm it developed and called a Möbius Bridge. This result also took around a week and $100k in API cost.\n\nThis result was reached almost entirely autonomously, being run in an researcher-built scaffold to allow Claude to pose hypotheses and run experiments to validate/refute them. The researcher asked Claude to design an attack that improves on the best cryptanalysis of AES. However, there were multiple instances of Claude not really engaging or claiming the problem was impossible. What followed was a short series of prompts (apparently all of the substantive prompts after the initial one) that may bring back recent memories of ChatGPT Sol solving the the Dinitz-Garg-Goemans conjecture about a week ago via Dmitry Rybin, who [announced it on X](https://x.com/DmitryRybin1/status/2079904005652893709/photo/1).\n\nAnthropic Researcher to Mythos | Rybin to Sol |\n\nAnd apparently three days later Mythos had discovered the Mobius Bridge idea creating an improved attack, and refined that attack over the next few days. This is frontier prompting now. After the discovery, it took hundreds of hours of Anthropic-researcher time to validate the model’s claim and prepare the [research paper.](https://www-cdn.anthropic.com/c88771e1bf5ee8885349eed05e5484c0e5f7e02b/aes_mobius_bridge.pdf)\n\nThey also released a Mythos-edited version of Mythos’ [chain of thought](https://www-cdn.anthropic.com/5273e714527440f1c8b7c7bf5756d4ac22ae8995/aes_mobius_bridge_cot.pdf) while working on the AES problem. This could offer some insight for people who are curious about the scaffold, but I’m not sure how much. It doesn’t use any sort of concurrent multi-agent workflow like what is briefly described in the HAWK finding, but it does show many references to prior agents, and in the specific session its first task is to read the background findings already performed by various agents.\n\nSome quick notes from me:\n\nI recreated the Anthropic screenshots using the quotes provided in the article. They would have all been sent multiple hours apart.", "url": "https://wpnews.pro/news/notes-on-the-anthropic-cryptographic-blogpost", "canonical_source": "https://www.lesswrong.com/posts/ftE2aJ8txJHQnf9dR/notes-on-the-anthropic-cryptographic-blogpost", "published_at": "2026-07-29 16:21:08+00:00", "updated_at": "2026-07-29 17:01:54.168609+00:00", "lang": "en", "topics": ["artificial-intelligence", "ai-research", "ai-safety", "ai-products"], "entities": ["Anthropic", "Claude Mythos Preview", "HAWK", "AES", "NIST", "Möbius Bridge", "Dmitry Rybin", "ChatGPT Sol"], "alternates": {"html": "https://wpnews.pro/news/notes-on-the-anthropic-cryptographic-blogpost", "markdown": "https://wpnews.pro/news/notes-on-the-anthropic-cryptographic-blogpost.md", "text": "https://wpnews.pro/news/notes-on-the-anthropic-cryptographic-blogpost.txt", "jsonld": "https://wpnews.pro/news/notes-on-the-anthropic-cryptographic-blogpost.jsonld"}}