How The Cryptography Behind Finance And Defence Is Being Challenged
AIThis post was created with the assistance of artificial intelligence (AI).

🔍 Read the full analysis: How The Cryptography Behind Finance And Defence Is Being Challenged on ThorstenMeyerAI.com

Buying for a business?Offer from Amazon

Get business pricing on tech for your team

  • Business-only prices and quantity discounts
  • Tax-exempt purchasing
  • Multiple users, one account, clear invoices
As an affiliate, we earn on qualifying purchases.

TL;DR

A source report says OpenAI published 722 mathematical manuscripts on Oct. 6, including results that challenge some long-standing assumptions about computational limits. No cryptographic system has been shown to be broken, but researchers and cryptocurrency figures have raised questions about whether AI could help discover new algorithms. The claims require expert verification, and the risks to current and post-quantum cryptography remain uncertain.

A reported release of 722 mathematical manuscripts produced with an unreleased OpenAI model has prompted new debate about whether AI could help find algorithms that weaken cryptography used in finance, intelligence and defence. The source account says the manuscripts include results challenging some accepted limits on computation, but no encryption or signature system has been reported broken, and the mathematical claims have not all been independently verified.

According to the source account, OpenAI published the manuscripts on Oct. 6, organized into 372 families and drawn from roughly 4,000 problems. It says the work includes claims involving the Unique Games Conjecture, Hilbert’s tenth problem over the rationals and the Riemann zeta function. The account reports that an internal model generated the work using, on average, about three hours of ChatGPT Pro compute per result. These details and the claimed results should be treated as reported claims pending scrutiny, not proof that cryptographic systems have failed.

Some reported results concern the speed of computation: multiplication and Fourier transforms below the commonly cited n log n threshold, and a result placing 3SUM at about n^1.9992 time. The source says the 3SUM result appeared in work by Virginia Vassilevska Williams and Josh Alman, with a key idea attributed to an Anthropic model. Computer scientist Scott Aaronson reportedly drew attention to the absence of cryptography-focused manuscripts and said companies were discreetly testing whether their models could break important protocols. The account also says OpenAI withdrew a claimed proof concerning the Hodge conjecture for products of K3 surfaces after a sign error was identified.

Those examples underline a distinction: faster algorithms for selected problems do not automatically translate into attacks on deployed cryptography. The article’s central concern is that mathematical assumptions underpinning security are not proven forever. A new algorithm could change the cost of a task that current systems rely on being impractical, but no such cryptographic algorithm is identified in the provided account.

At a glance
reportWhen: Reported Oct. 6-7; claims and security…
The developmentA reported release of AI-generated mathematical manuscripts has prompted renewed concern that AI-assisted algorithm discovery could test assumptions underlying cryptography.
The Old Map Is Gone — ISR Briefing
AI Dispatch · ISR Briefing · 9 October 2026

The old map is gone: AI mathematics, quantum computers and the cryptography holding up finance and defence

For a decade the plan was simple: elliptic curves doomed by quantum; lattices safe; hashes safe. Nothing has been broken. But a second threat has arrived that doesn’t respect those borders — AI producing new mathematics faster than any human community, against assumptions that are believed, not proven.

The map — then and now
Elliptic curves
Then: doomed by quantum

Now: on borrowed time — possibly shorter than the quantum countdown suggests.

Lattices (ML-KEM, ML-DSA)
Then: safe

Now: unproven against AI — and the destination most of the world is migrating to.

Codes (Classic McEliece)
Then: the conservative fallback

Now: reminded estimates move — BSI advised against new deployments on 1 Oct 2026.

Hashes (SLH-DSA, LMS, XMSS)
Then: safe

Now: safest ground available — not a guarantee.

Nothing has been broken. The map changed because the threat model did.
Two threats, one migration
Quantum threat
AI-mathematics threat
Attacks
RSA & elliptic curves
Anything with exploitable structure — possibly the new lattice standards
Needs
Large error-corrected quantum computer
A better algorithm on ordinary computers
Warning signs
Visible: qubits, error rates, roadmaps
Possibly none — an algorithm can be found and kept secret
First to get there
Whoever builds the machine
Whoever has the best model — incl. states that never announce
What survives
Lattices, codes, hashes
Probably hashes; lattices need bigger keys
The quantum threat comes with a countdown you can watch. The AI threat may not.
The trigger — records broken, by slivers
Integer multiplication
< n log n

~n log0.9999999999999 n — a barrier many thought fundamental (OpenAI, claimed)

3SUM
n1.9992

Overturns a half-century conjecture. Williams & Alman; key idea from an Anthropic model

Cryptography
absent

“Conspicuous by its absence” (Aaronson) — labs reportedly testing crypto “gingerly and discreetly”

This week: shaved exponentssliver
A break: 2¹²⁸ → one GPU-weekcollapse
Remarkable mathematics — not a break. The open question: can AI compress the decades the number field sieve took into years? (conceptual, not to scale)
The crypto canary — four voices
Justin Drake · Ethereum Foundation
“Bunker mode”

ECDSA could break before Q-day, “in the worst case in months not years.” Move funds to never-signed addresses. ~6M BTC sit behind exposed keys.

Vitalik Buterin · Ethereum
“ML-DSA / FHE / lattices”

The new risk is the destination of the migration. Hash-only where possible; “much more paranoid” lattice params; ×10 key sizes long-term. Doesn’t recommend anyone scramble.

Yehuda Lindell · Coinbase
“The very definition of FUD”

“No evidence whatsoever” that elliptic-curve assumptions are close to failing.

Isabel Foxen Duke · BIP-360
Don’t treat it as a deadline

Classical breaks could reach “quantum-safe” schemes — but don’t treat a two-year scenario as a date.

Author’s view — what I think is happening
1974 → 1990 → 1994
Differential cryptanalysis

Known to IBM and the NSA designing DES (~1974); public via Biham & Shamir (~1990); confirmed by Coppersmith (1994).

early 1970s → 1997
Public-key cryptography

Invented at GCHQ — RSA- and Diffie–Hellman-equivalents — and kept secret for over two decades.

October 2026
An empty folder

No crypto in 722 manuscripts. Found and withheld? Not posed? Posed and failed? Indistinguishable from outside.

Opinion, not reporting: withholding is plausible, has precedent — and would be the responsible choice. Either way: “nothing published” cannot be read as “nothing found.” There is no evidence of any AI-driven break.
Defence & intelligence — the secrets that must last
Harvest now, decrypt later

Traffic recorded today is decrypted when a break arrives. For secrets that must last 25+ years, a break in 2035 is a break today. A state that finds one won’t announce it — it will mine its archives.

Key exchange can’t be hash-only

Signatures can be built from hashes. Encryption and key exchange need a trapdoor with structure — lattices, codes or group theory. Defence can only choose which structure, how much margin, how many combined.

Hedge
US · NSA CNSA 2.0
Germany · BSI TR-02102-1
Key exchange
ML-KEM-1024 only (highest params)
ML-KEM + FrodoKEM (less structured, tighter reduction)
Signatures
ML-DSA-87; LMS/XMSS for firmware
ML-DSA, SLH-DSA, LMS, XMSS
Hybrid with classical
Not required
Required — classical-only key agreement ends from 2031
Key dates
1 Jan 2027 procurement gate · 2030 firmware & networks · 2033 most systems · 2035 all
2031 onward: end dates for classical-only use
The NSA already does much of what Buterin advises — top parameters, hashes for firmware — but its key exchange rests on one lattice family. Europe’s more diverse, hybrid posture is a sovereignty argument worth making loudly. For 15-year ISR platforms and sensors: crypto-agility is a procurement requirement.
Finance — timelines built on the wrong countdown
G7 CEG roadmap publishedJan 2026
Critical systems migrated2030–32
Whole sector migrated2035
Deadlines are ceilings

Every date was set against quantum hardware forecasts with visible warning. The AI threat offers none.

Agility over destination

“ML-KEM everywhere” means starting over if lattices weaken. “We can swap algorithms” doesn’t.

Watch the canary

Blockchains show a classical break first — exposed keys and balances are public. Monitor dormant exposed addresses.

G7 Cyber Expert Group, co-chaired by the US Treasury and the Bank of England — six phases, non-binding, 2030–32 “challenging but prudent”.
What to do now — the same whether the threat is quantum, AI or both
Inventory

Every algorithm, key, certificate, protocol.

Hybrid

PQ + classical, as BSI requires.

Hash-based signing

Firmware, updates, long-term keys.

Conservative params

Highest sets; evaluate FrodoKEM.

Diversify key exchange

More than one mathematical family; HQC coming.

Build for agility

Swap algorithms without rebuilding.

Shrink exposure

Forward secrecy, rotation, hidden keys.

Don’t panic-migrate

Buterin: lost more in botched migrations than in all hacks.

The take

Nothing has been broken, and the sceptics are right that there’s no evidence elliptic curves or lattices are about to fall. But the map has changed: elliptic curves on borrowed time, lattices unproven against AI, codes reminded that estimates move, hashes the safest ground available. For finance, intelligence and defence the answer is the same whichever threat arrives first.The quantum threat comes with a countdown. The AI threat may arrive as a silence — an empty folder where a paper should have been. The winners will be those who can change their algorithms fastest.

Sources: OpenAI maths release (6 Oct 2026); Aaronson, “The Mathocalypse” (7 Oct 2026); Drake & Buterin posts on X (7–8 Oct 2026); Lindell, Foxen Duke via Decrypt, cryptonews.net, Yellow; ~6M BTC via Cryptopolitan; NIST FIPS 203/204/205; NSA CNSA 2.0; BSI TR-02102-1 (2025/2026) & 1 Oct 2026 Classic McEliece advice; G7 CEG roadmap (13 Jan 2026); DES/GCHQ history. Author’s-view section is opinion. No AI-driven cryptographic break has been published. Not security or investment advice.
thorstenmeyerai.comin cooperation with vigilsar.com

AI Could Change Security Timelines

Cryptography protects financial transactions, communications and sensitive government and military information. If a practical algorithm weakened a widely used public-key system, organizations could face exposure to forged signatures, compromised key exchanges or data captured for later decryption. These are potential consequences, not reported outcomes of the mathematical work described here.

The concern differs from the familiar quantum-computing threat. Quantum risks are tied to the prospect of sufficiently capable machines running algorithms such as Shor’s. AI-assisted mathematical discovery, by contrast, could yield an algorithm that runs on conventional computers. A discovery might be kept secret, making it harder for banks or governments to assess the risk from public hardware milestones. The source account does not establish that an AI system has found such an algorithm.

For organizations planning upgrades, the issue is not a reason to abandon current systems overnight. It is a reason to track evidence, test assumptions and consider whether security plans can adapt if the mathematical basis for a scheme changes. Verification and responsible disclosure matter: premature claims can trigger costly, disruptive migration without a demonstrated threat, while delayed attention to a real breakthrough could leave systems exposed.

Amazon

quantum-resistant cryptography tools

As an affiliate, we earn on qualifying purchases.

As an affiliate, we earn on qualifying purchases.

Quantum Migration Meets AI

For years, security planning has treated some cryptographic families as vulnerable to future quantum computers and others as more resistant. A sufficiently capable quantum computer could use Shor’s algorithm against RSA and elliptic-curve cryptography, which support many public-key operations. In response, organizations have begun preparing to adopt post-quantum cryptography.

NIST standardized three prominent post-quantum standards in August 2024: ML-KEM for key establishment, ML-DSA for digital signatures, and SLH-DSA, a hash-based signature standard. The source account highlights a potential complication: AI-assisted mathematics might test assumptions behind lattice-based systems as well as older schemes. That remains a possibility, not a demonstrated weakness in these standards. Hash-based cryptography is also not automatically immune to every future development, though the source describes hashes as comparatively likely to remain useful.

Public cryptocurrency networks have made the discussion visible because transactions can expose public keys and the assets at risk can be counted. The source says Ethereum Foundation researcher Justin Drake urged the industry on Oct. 7 to plan calmly for a possible move to addresses with unexposed public keys. Ethereum co-founder Vitalik Buterin cautioned against a rushed transfer of funds while raising questions about lattices and other mathematical tools. Their comments are warnings and assessments, not evidence of an active cryptographic break.

Amazon

cryptography security software

As an affiliate, we earn on qualifying purchases.

As an affiliate, we earn on qualifying purchases.

No Cryptographic Break Is Confirmed

The provided account identifies no verified attack on RSA, elliptic-curve cryptography, lattice-based standards or another deployed cryptographic system. It also does not provide technical papers, independent validation or enough detail to assess the claimed computational results. The reported withdrawal of a Hodge conjecture proof after a sign error illustrates why AI-generated mathematical work needs careful review.

It remains unclear whether any model has found a genuinely new cryptographic attack, how capable the systems being tested are, or whether companies or governments have results they have not disclosed. The account gives no confirmed timeline for a practical threat. Its estimate that roughly six million bitcoin are held in addresses with exposed public keys is presented without a detailed methodology or date-specific breakdown, so it should be treated as a reported estimate rather than an independently established count.

It is also uncertain whether any future algorithm would affect all implementations of a cryptographic family, only particular parameters, or only a narrow computational setting. Until researchers can reproduce and analyze a result, concern about mathematical assumptions should not be confused with evidence that users’ funds or communications are currently vulnerable.

Amazon

cryptography research books

As an affiliate, we earn on qualifying purchases.

As an affiliate, we earn on qualifying purchases.

Independent Checks Will Set the Pace

The immediate next step is independent mathematical review of the reported manuscripts and any cryptography-related findings. Researchers will need to establish whether results are correct, whether they improve on existing methods, and whether those improvements can be turned into practical attacks against real systems. The source account does not identify a public cryptographic result awaiting a specific release date.

Financial institutions, government agencies and defence organizations can continue tracking post-quantum migration while reviewing how they would respond to credible evidence of a new algorithm. For cryptocurrency users, Drake’s and Buterin’s contrasting advice points to a need for clear, evidence-based guidance rather than rushed transfers. Any specific migration recommendation depends on technical details not provided in the account.

Further disclosures from AI companies, peer review of the mathematical claims, and assessments from standards bodies will help clarify whether the reported work changes security assumptions or mainly signals a new research capability. For now, the development is a warning to investigate—not confirmation that cryptography has been defeated.

Amazon

AI cryptography analysis tools

As an affiliate, we earn on qualifying purchases.

As an affiliate, we earn on qualifying purchases.

Key Questions

Has AI broken encryption or cryptocurrency signatures?

No confirmed break is reported. The source account describes mathematical results and private testing claims, but does not identify a verified attack on a deployed cryptographic system.

What did OpenAI reportedly publish?

The account says OpenAI published 722 mathematical manuscripts in 372 families on Oct. 6, produced with an unreleased model. The claims need independent checking, and one reported proof was withdrawn after a sign error was found.

How is this risk different from quantum computing?

A quantum threat depends on building a sufficiently capable quantum computer. The AI-related concern is that a new mathematical algorithm might run on ordinary computers; no such cryptographic algorithm has been confirmed in the material provided.

Are post-quantum standards also under threat?

The source raises questions about lattice-based standards such as ML-KEM and ML-DSA, but presents no demonstrated weakness in them. Their security remains a matter for ongoing analysis, not a reported failure.

Should cryptocurrency holders move funds now?

The source reports that Justin Drake advised planning for a possible protective mode, while Vitalik Buterin said he did not recommend scrambling to move funds immediately. The material does not establish an active attack or provide a universal recommendation for users.

Source: ThorstenMeyerAI.com

FALL

Fall Picks

As an affiliate, we earn on qualifying purchases.

You May Also Like

Detecting And Countering Misuse Of AI: September 2026 – Anthropic

Anthropic releases its September 2026 report detailing how it detects and counters AI misuse, highlighting ongoing transparency efforts amid evolving threats.

Vint Cerf, a “father of the Internet”, is retiring

Vint Cerf, a pioneering figure in internet development, is retiring after decades of influence. This marks the end of an era in tech history.

The Safety Card, Played From Every Side: David Sacks, Anthropic, and the Fable Standoff

White House adviser David Sacks claims Anthropic refused to fix a cybersecurity flaw, leading to model bans, conflicting with Anthropic’s account. The truth remains unclear.

Anthropic Sued Over Alleged Theft Of ‘Tens Of Thousands’ Of Songs

Legal complaint accuses AI company Anthropic of unlawfully copying large volumes of music for training its models, raising questions about data use in AI development.