Comment by nicce
1 day ago
Maybe someone already figured it out, but it is well covered somewhere. And Claude just used it. I wonder if we ever know for sure.
1 day ago
Maybe someone already figured it out, but it is well covered somewhere. And Claude just used it. I wonder if we ever know for sure.
Claude seems to be fairly good at bruteforcing/testing/etc on it's own, it solved a fairly intricate thing while I was busy on other things.
I've adapted a crypto-lib for TLS connections and had a mistake during negotation that truncated some algo-selection value, worked up until the other party started trialling post-quantum algorthims that apparently had algo-id's that collided with the truncated values I was using.
Claude figured out that from the code and trialling TLS handshakes.
Besides, since there was a bounty on finding the curve it seems unlikely that someone would've found out and not shared that? (unless working at a security service that figured out that it was possible to attack?)
I wonder if Claude does the brute-forcing directly. I think what's more likely is that Claude is synthesising programs that brute-force, albeit with interesting heuristics.
Wouldn't they have claimed the bounty?
If they thought it to be backdoor, why not sell for some other believer who pays more than the bounty? But anyway, not everyone is after money and fame.