To the point: AI-driven analysis discovered in 60 hours what human experts overlooked for two years – organizations must treat cryptography as continuously managed infrastructure, not as a one-time migration.
Anthropic researchers discovered in just 60 hours of AI-driven analysis a mathematical symmetry in HAWK that cuts the effective key security in half. The HAWK team subsequently withdrew its candidate from the NIST standardization process for post-quantum cryptography.
The vulnerability had remained undetected during two years of intensive human review. The lattice-based signature scheme HAWK was intended to be standardized as a quantum-resistant alternative to classical methods. The withdrawal from the NIST process shows that the review mechanism is functioning: weaknesses are identified before a standard is adopted.
For CISOs, the core problem is the speed at which AI tools can analyze cryptographic algorithms. The time window between introduction of a method and availability of reliable attack techniques is contracting significantly. This means: the classical strategy of implementing an algorithm and relying on it for decades no longer works. Post-quantum cryptography is not merely a technical migration, but an ongoing discipline.
Crypto-agility thereby becomes a strategic necessity. Systems must be able to exchange or update cryptographic methods without enforcing a rearchitecture. This requires transparency about where and how algorithms are deployed in the IT environment, as well as documented and tested update paths. Hybrid approaches – in which a proven and a newer method run in parallel – follow this principle.
Particular attention deserves one fact: two of the three standardized post-quantum methods are also based on lattice-based mathematics. The withdrawal of HAWK does not signal the end of AI-driven cryptanalysis. The history of MD5 and SHA-1 shows that even standardized methods can become vulnerable over their lifetime. CISOs should assume that in future, further weaknesses will be revealed through automated analysis.
Source: www.it-daily.net · Published 31 July 2026
Lumi AI News — AI-assisted curation in accordance with Art. 50 EU AI Act. Paraphrase and classification by Lumi News Pipeline v1.7.3.