Anthropic says AI found attacks on HAWK-256 and reduced-round AES

Anthropic says AI found attacks on HAWK-256 and reduced-round AES

Claude Mythos Preview uncovered research attacks on HAWK-256 and reduced-round LEA while deployed systems and Bitcoin remain unaffected, highlighting AI’s growing role in testing cryptographic designs before adoption.

BTC

Fact Check
The primary source — Anthropic's own research announcement 'Discovering cryptographic weaknesses with Claude' (Jul 28, 2026) — directly confirms every element of the claim: Claude Mythos Preview identified a sharper attack on HAWK (halving key strength), a faster attack on AES-128 reduced to 7 rounds (200-800x speedup via 'Möbius Bridge'), and a break on reduced-round LEA (13-round key recovery), with an explicit statement that no production systems are affected. CryptoBriefing independently corroborates these details. The claim aligns precisely with the authoritative source.
    Reference12
Summary

Anthropic said its Claude Mythos Preview model uncovered new cryptographic attacks in findings published on July 28, 2026, underscoring how frontier AI systems are becoming useful tools for expert-level cryptanalysis. The company said the most significant result found a previously unused symmetry in HAWK, a post-quantum digital signature candidate in NIST’s standardization process, reducing the expected cost of full key recovery for HAWK-256 from 2^64 to 2^38 operations. Anthropic said the HAWK work took about 60 hours, with each of the two main studies costing roughly $100,000 in API credits. For HAWK-512 and HAWK-1024, it said the attack remains practically infeasible, though maintaining the same security level would require roughly doubling key sizes and eroding one of HAWK’s main advantages: compactness. Separately, Anthropic said Claude Mythos Preview found an attack on 13 rounds of the Korean LEA block cipher standard that could recover the key in under an hour on a modern desktop computer, while stressing that the full cipher uses 24 rounds and that current systems are not at risk. Anthropic said the findings were disclosed in advance to the algorithm authors, U.S. government agencies and industry partners, with the HAWK result coordinated through NIST’s mailing list. The broader significance for crypto is not that Bitcoin or deployed software was affected, but that AI-assisted cryptanalysis may be making it faster and cheaper to identify weaknesses in candidate algorithms before they are adopted. Anthropic and academic collaborators also introduced CryptanalysisBench, a 191-task benchmark spanning six families of cryptographic primitives, and said tested frontier models solved 65.3% to 85.7% of level-one tasks, while no model exceeded 9% on full schemes with no published practical attacks.

Terms & Concepts
  • cryptanalysis: The study of finding weaknesses in cryptographic systems or algorithms.
  • post-quantum digital signature: A signature scheme designed to remain secure against attacks from future quantum computers.
  • key recovery: An attack that seeks to reconstruct a secret cryptographic key from public data or observed operations.