Security Cryptography Whatever

The gang talks about what AI getting Good At Math might mean for cryptography, and why public-key cryptography probably isn’t ending. David is on a mission to civilize and claims a crisis of empiricism. He also wrote a blog post about this. Everyone agrees Nadia deserves tokens.
“I mean, you could claim that anything's real if the only basis for believing in it is that nobody's proved it doesn't exist!”
Transcript: https://securitycryptographywhatever.com/2026/10/27/everybody-is-losing-their-minds-about-ai-math-and-crypto/
Chapters:
00:00 intro
05:19 rumors swirl   
12:37 math etiquette
17:11 magical math machines
21:42 diffie-hellman
29:50 finite field
34:45 david aware
42:36 complexity theory
48:40 full disclosure
Links:
- David’s Blog: https://dadrian.io/blog/posts/everybody-is-losing-their-minds/
- Similar opinions from virgi: https://people.csail.mit.edu/virgi/thoughts.txt
- The OpenAI Math Drop: https://github.com/openai/math
- Scientific American on the OpenAI math drop: https://www.scientificamerican.com/article/openai-unleashes-hundreds-more-math-results-upon-a-field-already-in-shock/
- Derek Thompson on AI’s impact on math: https://www.derekthompson.org/p/i-know-why-the-mathematicians-weep
- Sophie Schmieg’s blog connecting elliptic curves and finite field DH: https://keymaterial.net/2025/05/23/there-is-no-diffie-hellman-but-elliptic-curve-diffie-hellman/
- Friend of the show Steve Weiss factored RSA-896 with spare Anthropic capacity: https://saweis.net/posts/rsa-896.html
- Alex Clemmer’s tweet about the shortcomings of complexity theory: https://x.com/hausdorff_space/status/2107916908616175701
- Ben Recht (Berkeley ECE) on the FFT improvements showing how complexity theory can be disconnected from real computers:: https://www.argmin.net/p/faster-fourier-transforms
- State of the art number field sieve implementation (CADO-NFS): https://cado-nfs.gitlabpages.inria.fr/
- Why 128-bits of symmetric security is enough for quantum resistance: https://words.filippo.io/128-bits/
- https://en.wikipedia.org/wiki/Nadia_Heninger
- https://cseweb.ucsd.edu/~nadiah/
- Matt Green’s Tokens to Humans estimator: https://bitsofwork.org/

"Security Cryptography Whatever" is hosted by Deirdre Connolly (@durumcrustulum), Thomas Ptacek (@tqbf), and David Adrian (@dadrian)

The robots are at it again, and this time they’re solving, and breaking(?), math and cryptography! Things have been happening in the lattice corner including new leapfrogging complexity results in the closest vector problem (CVP), AND a possible poly-time quantum attack against the dihedral coset problem (DCP) that made everyone freak out for about a week (UPDATE: looks like it’s busted: https://eprint.iacr.org/2026/1693). ALSO, there was an important distinguisher attack against Classic McEliece, which on its face doesn’t sound like a big deal, unless you’re familiar with the track record of efficient distinguishers in the history of code-based cryptography… 😱

To help us make sense  of all this we are joined again by OG friend of the pod Chris Peikert! We had trouble with his audio but tried our best to fix it, apologies.

Transcript: https://securitycryptographywhatever.com/2026/08/26/ai-lattice-proofs-with-chris-peikert/

Links:
- https://openai.com/index/ten-advances-in-mathematics/
- https://cdn.openai.com/pdf/ten-proofs-oai.pdf
- https://x.com/ChrisPeikert/status/2083534770403750025
- https://bsky.app/profile/chrispeikert.bsky.social/post/3msp3boueis2z
- https://en.wikipedia.org/wiki/Boolean_satisfiability_problem
- https://knowyourmeme.com/memes/wordcel-shape-rotator-mathcel
- Chen 2024: https://eprint.iacr.org/2024/555
- https://eprint.iacr.org/2026/1630
- https://eprint.iacr.org/2026/1693
- CVP within n^(1/2-ɛ) -  : https://eprint.iacr.org/2026/1655

"Security Cryptography Whatever" is hosted by Deirdre Connolly (@durumcrustulum), Thomas Ptacek (@tqbf), and David Adrian (@dadrian)

We invited Mark Schultz-Wu on the podcast to talk about the history of lattice cryptography. When lattices are explained in plain english, they are actually quite simple! I don't think any of us have ever seen Deirdre so happy. If you're watching the video version, there's a section that's 6.1 minutes long with no cuts and consists just of Deirdre vigorously agreeing with what Mark is saying while smiling. What a time to be alive.
Anyway, we are hosting another happy hour in Vegas between Black Hat and DEF CON! It's sponsored by Teleport! Thank you to Teleport, and dear readers, you should go check them out. Check out our socials or the podcast site to register.
Transcript: https://securitycryptographywhatever.com/2026/07/27/lattices-with-mark-schultz-wu/
Links:
Mark's IETF Post https://mailarchive.ietf.org/arch/msg/tls/HznE1IcCjstEjhh4M1p59qX1JlQ/
NTRU https://en.wikipedia.org/wiki/NTRU
The original lattices are hard paper https://www.scirp.org/reference/referencespapers?referenceid=3401227
The original LWE for cryptography paper https://arxiv.org/abs/2401.03703
Entropic LWE https://eprint.iacr.org/2020/119
Dilithium round 3 submission: https://pq-crystals.org/dilithium/data/dilithium-specification-round3.pdf
Recent attacks on Classic McEliece: https://eprint.iacr.org/2024/1694
Lectures on post-quantum cryptography from Alfred Menezes (an originator of elliptic curve cryptography) https://www.youtube.com/@cryptography101-alfred
Falcon https://csrc.nist.gov/csrc/media/Presentations/2024/falcon/images-media/prest-falcon-pqc2024.pdf
Regev: https://cims.nyu.edu/~regev/#research
Tightness in Proofs: https://eprint.iacr.org/2016/360.pdf

"Security Cryptography Whatever" is hosted by Deirdre Connolly (@durumcrustulum), Thomas Ptacek (@tqbf), and David Adrian (@dadrian)

The dear leader has actually bleated out some not-dumb executive orders (EOs) to accelerate adoption of post-quantum crypto for the US government! This looks to be in response to a flurry of advancements in quantum computing and quantum attack algorithms a few months ago. We cram legalize into our eyeballs— plus, ECDSA.fail!

Watch on YouTube: https://www.youtube.com/watch?v=7ZwQpN_F6P8

Transcript: https://securitycryptographywhatever.com/2026/07/02/trumps-golden-post-quantum-eos
Links:
- The EO https://www.whitehouse.gov/presidential-actions/2026/06/securing-the-nation-against-advanced-cryptographic-attacks/
- CNSA2 https://media.defense.gov/2022/Sep/07/2003071836/-1/-1/0/CSI_CNSA_2.0_FAQ_.PDF
- https://media.defense.gov/2025/May/30/2003728741/-1/-1/0/CSA_CNSA_2.0_ALGORITHMS.PDF
- https://www.ecdsa.fail/
- https://blog.google/innovation-and-ai/technology/safety-security/cryptography-migration-timeline/
- https://blog.cloudflare.com/post-quantum-roadmap/
- https://blog.google/innovation-and-ai/technology/research/neutral-atom-quantum-computers/
- https://en.wikipedia.org/wiki/FedRAMP
- https://www.whitehouse.gov/presidential-actions/2026/06/ushering-in-the-next-frontier-of-quantum-innovation/
- https://blog.trailofbits.com/2026/04/17/we-beat-googles-zero-knowledge-proof-of-quantum-cryptanalysis/
- https://scottaaronson.blog/?p=9861

"Security Cryptography Whatever" is hosted by Deirdre Connolly (@durumcrustulum), Thomas Ptacek (@tqbf), and David Adrian (@dadrian)

We talk to Michał Zalewski (lcamtuf) about the vulnpocalypse and if we even need fuzzers anymore. This episode may be export controlled at a future date.
Watch on YouTube: https://www.youtube.com/watch?v=uI9CSgB4p9o
Transcript: https://securitycryptographywhatever.com/2026/06/14/facing-the-vulnpocalypse-with-lcamtuf
https://github.com/google/afl
https://www.reddit.com/r/claude/comments/1tqtenf/anthropic_said_today_that_mythos_is_coming_to_all/
https://github.com/google/clusterfuzz
https://en.wikipedia.org/wiki/Jevons_paradox
https://en.wikipedia.org/wiki/XZ_Utils_backdoor
https://en.wikipedia.org/wiki/Brighton_hotel_bombing
https://curl.se/
https://ftp.openbsd.org/pub/OpenBSD/patches/7.8/common/025_sack.patch.sig
https://www.wired.com/story/last-pass-vulnerability-password-safe/
https://nostarch.com/tangledweb
https://nostarch.com/silence.htm
https://nostarch.com/practical-doomsday
https://nostarch.com/secret-life-of-circuits
https://www.youtube.com/c/3blue1brown

"Security Cryptography Whatever" is hosted by Deirdre Connolly (@durumcrustulum), Thomas Ptacek (@tqbf), and David Adrian (@dadrian)