Anthropic 称其 Mythos 模型发现了保护互联网的加密算法中的漏洞

Anthropic's AI model Claude Mythos Preview found mathematical weaknesses in cryptographic algorithms, including a reduced version of AES, the world's most widely used symmetric encryption standard. Anthropic says the findings have no immediate impact on systems currently in use. Working largely on its own in a multi-agent system, the model developed two attacks at an API cost of roughly $100,000 each. According to Anthropic, the human researchers mostly handled project management, provided simple prompts, and later verified the results. Anthropic's AI model Claude Mythos Preview found mathematical weaknesses in cryptographic algorithms that underpin digital security. According to Anthropic, the model developed an improved attack on the post-quantum signature scheme HAWK and a new attack on a reduced version of the Advanced Encryption Standard (AES). Encryption protects nearly everything people do online, and AES is the world's most widely used symmetric encryption standard for digital data. Anthropic says neither finding affects systems in use today. HAWK is only a candidate in an ongoing standardization process run by the U.S. National Institute of Standards and Technology (NIST) and the AES attack applies to a modified version that uses 7 of the full scheme's 10 rounds. Still, the results show how AI models could challenge core assumptions behind internet security. Ad HAWK is one of the remaining schemes in the third round of NIST's competition for additional post-quantum signatures. These schemes are designed to stay secure even against future quantum computers. Human experts had reviewed HAWK for over two years, but Mythos Preview found an improved attack in just 60 hours, according to Anthropic. Ad DEC_D_Incontent-1 The attack exploits a previously undetected symmetry in the mathematical lattice that HAWK's security relies on. Mythos worked semi-autonomously in a multi-agent system to find it. One agent initially tried to dismiss the idea as infeasible, according to the report, but a second agent found a way to fully exploit it. The human researcher had a background in theoretical computer science but wasn't an expert in lattice-based cryptography, Anthropic says. His role was mostly limited to project management. The API costs totaled about $100,000. Ad The model also found the attack on a reduced version of AES-128 almost entirely on its own, according to Anthropic. A researcher built a scaffold that allowed Claude to form hypotheses and test them through experiments. Mythos then developed a new fingerprinting method that Anthropic calls "Möbius Bridge." The method removes one of the guesses an attacker must make and improves on the best previously known attacks by a factor of 200 to 800. Ad DEC_D_Incontent-2 Human prompting played a small role. The model initially refused to tackle the problem because it considered further improvements impossible, writing that "If you want a different outcome, the target has to change … AES-128 r5/r6 is just genuinely hard." Mythos only began pursuing more creative approaches after the researcher encouraged it to look for "genuinely novel ideas." Ad