🔍 Read the full analysis: The Cryptography Supporting Finance And Defence Is Entering A New Era on ThorstenMeyerAI.com
Get smart everyday buys delivered free with Prime
- Fast, free delivery on millions of items
- Prime Video, Amazon Music and more included
- Member-only deals all year
TL;DR
An OpenAI release of 722 AI-produced mathematical manuscripts and separate advances in algorithm research have renewed questions about assumptions underpinning cryptography. Researchers have not shown that current public-key systems or post-quantum standards have been broken, and experts disagree on how urgently users should act.
An OpenAI model produced 722 mathematical manuscripts published on October 6, prompting renewed scrutiny of the assumptions behind cryptography used in finance, intelligence and defence. The work does not show that any encryption system has been broken, but researchers have warned that AI-assisted discoveries could challenge mathematical problems treated as computationally difficult.
According to the source material, the manuscripts cover 372 families of problems and were generated by an unreleased internal model from roughly 4,000 problems. The reported claims include results concerning the Unique Games Conjecture, Hilbert’s tenth problem over the rationals and a zero-free region for the Riemann zeta function. These are claims requiring expert verification, not a settled body of accepted proofs. OpenAI reportedly withdrew a claimed proof concerning the Hodge conjecture for products of K3 surfaces after a sign error was identified.
For cryptography, the attention is less on famous conjectures than on work about the speed of computation. The source cites results involving faster methods for integer multiplication and Fourier transforms, as well as a result for 3SUM by Virginia Vassilevska Williams and Josh Alman. It says an Anthropic model contributed the central idea to the latter work, published a day before the OpenAI manuscript release. These developments concern algorithms; they do not, by themselves, establish that a cryptographic key can be recovered.
Computer scientist Scott Aaronson noted that cryptography was absent from the 722 manuscripts. The source says Aaronson was told AI companies have discreetly begun testing whether internal models can break important cryptographic protocols. Those tests and their results have not been publicly detailed. Meanwhile, Ethereum Foundation researcher Justin Drake urged planning for a possible early break of elliptic-curve signatures, while Ethereum co-founder Vitalik Buterin cautioned against an immediate rush to move funds and pointed instead to risks that could affect post-quantum lattice systems.
The old map is gone: AI mathematics, quantum computers and the cryptography holding up finance and defence
For a decade the plan was simple: elliptic curves doomed by quantum; lattices safe; hashes safe. Nothing has been broken. But a second threat has arrived that doesn’t respect those borders — AI producing new mathematics faster than any human community, against assumptions that are believed, not proven.
Now: on borrowed time — possibly shorter than the quantum countdown suggests.
Now: unproven against AI — and the destination most of the world is migrating to.
Now: reminded estimates move — BSI advised against new deployments on 1 Oct 2026.
Now: safest ground available — not a guarantee.
~n log0.9999999999999 n — a barrier many thought fundamental (OpenAI, claimed)
Overturns a half-century conjecture. Williams & Alman; key idea from an Anthropic model
“Conspicuous by its absence” (Aaronson) — labs reportedly testing crypto “gingerly and discreetly”
ECDSA could break before Q-day, “in the worst case in months not years.” Move funds to never-signed addresses. ~6M BTC sit behind exposed keys.
The new risk is the destination of the migration. Hash-only where possible; “much more paranoid” lattice params; ×10 key sizes long-term. Doesn’t recommend anyone scramble.
“No evidence whatsoever” that elliptic-curve assumptions are close to failing.
Classical breaks could reach “quantum-safe” schemes — but don’t treat a two-year scenario as a date.
Known to IBM and the NSA designing DES (~1974); public via Biham & Shamir (~1990); confirmed by Coppersmith (1994).
Invented at GCHQ — RSA- and Diffie–Hellman-equivalents — and kept secret for over two decades.
No crypto in 722 manuscripts. Found and withheld? Not posed? Posed and failed? Indistinguishable from outside.
Traffic recorded today is decrypted when a break arrives. For secrets that must last 25+ years, a break in 2035 is a break today. A state that finds one won’t announce it — it will mine its archives.
Signatures can be built from hashes. Encryption and key exchange need a trapdoor with structure — lattices, codes or group theory. Defence can only choose which structure, how much margin, how many combined.
Every date was set against quantum hardware forecasts with visible warning. The AI threat offers none.
“ML-KEM everywhere” means starting over if lattices weaken. “We can swap algorithms” doesn’t.
Blockchains show a classical break first — exposed keys and balances are public. Monitor dormant exposed addresses.
Every algorithm, key, certificate, protocol.
PQ + classical, as BSI requires.
Firmware, updates, long-term keys.
Highest sets; evaluate FrodoKEM.
More than one mathematical family; HQC coming.
Swap algorithms without rebuilding.
Forward secrecy, rotation, hidden keys.
Buterin: lost more in botched migrations than in all hacks.
Nothing has been broken, and the sceptics are right that there’s no evidence elliptic curves or lattices are about to fall. But the map has changed: elliptic curves on borrowed time, lattices unproven against AI, codes reminded that estimates move, hashes the safest ground available. For finance, intelligence and defence the answer is the same whichever threat arrives first.The quantum threat comes with a countdown. The AI threat may arrive as a silence — an empty folder where a paper should have been. The winners will be those who can change their algorithms fastest.
Why Cryptographic Migrations May Change
Financial institutions, intelligence agencies and militaries rely on cryptography to protect communications, verify identities and secure transactions. Their current migration plans largely address the quantum-computing threat: a sufficiently capable quantum computer could use Shor’s algorithm against RSA and elliptic-curve cryptography. The concern raised here is different: a new classical algorithm, possibly found with AI assistance, could weaken a problem that security systems assume is hard.
That difference affects planning. Quantum hardware development can be tracked through public milestones such as qubit counts and error rates. A mathematical breakthrough might be discovered privately and used before it is published, leaving organizations with less warning. This is a risk scenario, not evidence of a current attack. Still, it could make security reviews and migration choices more complicated, especially if confidence in lattice-based systems also comes under scrutiny.
The financial stakes are visible in public blockchains, where some addresses expose public keys and balances can be observed. Drake advised users to consider addresses whose public keys have not been exposed. The source cites roughly 6 million bitcoin in addresses with exposed public keys, but gives no underlying measurement method or date for that estimate. The figure should not be read as a count of funds that are currently vulnerable to a demonstrated attack.
quantum-resistant cryptography hardware
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
From Quantum Plans to AI Scrutiny
For years, security planning has distinguished between public-key systems expected to be vulnerable to quantum computing and replacement approaches believed to resist it. In August 2024, the U.S. National Institute of Standards and Technology standardized three post-quantum algorithms: ML-KEM for establishing encryption keys, ML-DSA for digital signatures, and SLH-DSA, a signature scheme based on hash functions. Organizations have been preparing to adopt these standards while continuing to use existing systems.
The new concern does not erase the quantum threat or establish that the replacement standards are weak. Instead, it questions whether the familiar division—elliptic curves at risk, lattices and hashes safe—offers enough certainty. Mathematical security assumptions are not proofs that no faster algorithm can ever be found. Ethereum co-founder Vitalik Buterin raised the possibility that currently unknown algorithmic advances could affect elliptic curves or lattices, drawing on the history of improved methods for factoring large numbers.
There are also reasons not to treat the AI results as a security emergency. Mathematical claims need checking, and a result about computational complexity does not automatically yield a practical attack against deployed cryptography. The source itself stresses that no cryptographic scheme has been shown to be broken by the cited work.
“Calmly begin planning for ‘bunker mode’.”
— Justin Drake, Ethereum Foundation researcher
post-quantum cryptography security tokens
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
No Public Cryptographic Break Shown
The source material does not identify a verified attack on RSA, elliptic-curve cryptography, ML-DSA or another deployed standard. It also gives no public results from the reported confidential testing by AI companies, and does not specify which protocols were tested or how the tests were evaluated. The scale of any practical risk therefore remains unknown.
The status of the mathematical manuscripts is also unsettled. The source describes a withdrawal after a sign error and says the remaining work requires checking, but does not provide a complete independent assessment of the proofs. Nor is it clear whether the reported algorithmic improvements can be adapted to key recovery, or whether they apply to the specific mathematical structures used in cryptography.
Drake’s warning about an elliptic-curve break and Buterin’s concerns about lattice systems are expert views about possible risks, not confirmed findings. The source does not state the year of the October announcements, provide independent confirmation of the bitcoin estimate, or identify an official response from NIST, banks or defence agencies.
As an affiliate, we earn on qualifying purchases.
Proof Checking and Security Reviews
The immediate next step is independent scrutiny of the AI-generated manuscripts and the cited algorithmic results. Researchers will need to establish which claims are correct, whether they improve on known methods, and whether any improvement has a practical bearing on deployed cryptography. The reported private tests by AI companies may also attract attention if their methods or findings become public.
Organizations responsible for financial, government and military systems are likely to weigh the claims against their existing post-quantum migration plans. The source does not identify a new government deadline, a revised NIST standard or a specific action required of institutions. For cryptocurrency users, Drake’s and Buterin’s comments differ on urgency; neither establishes that moving funds is necessary today.
For now, the confirmed development is increased scrutiny of mathematical assumptions, not a demonstrated compromise. Further proof verification, public disclosures from AI labs and any reproducible cryptographic attack would materially change the picture. Until then, the timing and scale of any threat remain uncertain.
As an affiliate, we earn on qualifying purchases.
Key Questions
Have AI systems broken a cryptographic system?
No verified break is reported. The mathematical manuscripts and algorithmic advances have prompted concern, but the source does not show that any deployed cryptographic key or protocol has been compromised.
What did OpenAI publish?
The source says OpenAI published 722 manuscripts across 372 problem families on October 6, generated by an unreleased model from about 4,000 problems. The claims remain subject to checking, and one reported proof was withdrawn after a sign error.
A sufficiently capable quantum computer could use Shor’s algorithm against RSA and elliptic-curve systems. The AI-related concern is that a model could help discover a better algorithm that runs on ordinary computers; no such practical cryptographic attack has been established in the source.
Are post-quantum standards such as ML-DSA known to be unsafe?
No. Vitalik Buterin raised lattice-based standards as an area worth examining, but the source provides no evidence that ML-DSA or other post-quantum standards have been broken.
Should cryptocurrency users move their funds now?
The cited researchers differ in emphasis: Justin Drake urged planning for a possible risk, while Vitalik Buterin said he did not recommend scrambling to move funds that day. The source does not establish a current attack or give a universal instruction for users.
Source: ThorstenMeyerAI.com
Halloween Picks
halloween
As an affiliate, we earn on qualifying purchases.
