Esc
SafetyCase Closed

Anthropic AI finds HAWK crypto flaw, forcing NIST withdrawal

Is this a scandal?

No longer — the story has resolved. Noise 23/100, cooling down, across 1 source.

SCAND-326796as of Methodology
Cite this incident"Anthropic AI finds HAWK crypto flaw, forcing NIST withdrawal." SCAND.Ai incident SCAND-326796, noise 23/100 as of October 29, 2026. https://scand.ai/scandal/anthropic-ai-finds-hawk-crypto-flaw-nist-withdrawal
FORECASTForecast, not fact

NIST will likely mandate AI-assisted red-teaming for all future cryptographic candidates because manual verification can no longer guarantee safety against automated analysis.

23

Noise 23/100 — louder than 94% of tracked AI controversies.

AI-assisted analysis · How we work

Why it matters

AI accelerating cryptanalysis threatens the timeline for post-quantum security standards and validates dual-use risks of advanced reasoning models.

Key points

  1. Anthropic AI reduced HAWK's effective security by 50% through an autonomous attack lasting only 60 hours.
  2. NIST withdrew the HAWK algorithm from post-quantum cryptography standardization consideration following the AI-discovered vulnerability.
  3. QIZ Security expert Itan Barmes cited the incident as proof that cryptographic agility is now a critical infrastructure requirement.
  4. The event demonstrates advanced AI models can independently discover novel mathematical attacks on proposed encryption standards.
  5. The speed of the AI-driven compromise raises concerns about the viability of static post-quantum standardization timelines.

The story

An Anthropic AI model discovered a critical vulnerability in the HAWK post-quantum cryptographic algorithm, reducing its effective security by half within 60 hours. This finding prompted the National Institute of Standards and Technology to withdraw HAWK from consideration as a federal encryption standard. The attack demonstrates that current AI systems can autonomously identify mathematical weaknesses in proposed security protocols faster than traditional human review processes. Itan Barmes of QIZ Security stated that this event underscores the urgent need for cryptographic agility in infrastructure planning. The incident highlights growing concerns regarding AI capabilities in offensive cybersecurity and mathematical research. NIST has not yet announced a replacement timeline for the withdrawn candidate. The discovery validates industry fears that AI could accelerate threats to next-generation encryption standards before deployment.

Who's involved

Critic
Itan Barmes

Argues the incident proves current standardization processes lack necessary cryptographic agility for the AI era

Neutral
Anthropic

Developer of the AI model that autonomously discovered the HAWK vulnerability during testing

Neutral
NIST

Withdrew HAWK from standardization consideration after the AI-identified security reduction was verified

How the conversation shifted

opinion has hardened

Polarity (0–100) from the noise pipeline, sampled over time.

Join the Discussion

Discuss this story

Community comments coming in a future update

Be the first to share your perspective. Subscribe to comment.

Noise Level

Murmur23?Noise Score (0–100): how loud a controversy is. Composite of reach, engagement, star power, cross-platform spread, polarity, duration, and industry impact — with 7-day decay.
Decay: 52%
Reach
45
Engagement
29
Star Power
40
Duration
100
Cross-Platform
20
Polarity
50
Industry Impact
50

The timeline

  1. QIZ Security publishes analysis

    Itan Barmes released expert insights emphasizing the necessity of cryptographic agility

  2. NIST withdraws HAWK candidate

    Agency removed algorithm from post-quantum consideration following verification of AI findings

  3. Anthropic AI executes HAWK attack

    Model identified vulnerability reducing effective security by half within a 60-hour window

The full record

Sources & methodology

Every claim above traces to these primary items. How we score →

What's being under-reported

No defender-side coverage yet

The critic side is sourced here; no defending voice has been captured yet.

  • Coverage: 1 social post, 0 news-outlet items.
  • Voices: 1 critic, 0 defenders.

The forecast

NIST will likely mandate AI-assisted red-teaming for all future cryptographic candidates because manual verification can no longer guarantee safety against automated analysis.

Forecast, not fact — an editorial estimate we score when this resolves.

You're up to date

That's the complete picture as of — nothing more to know right now. We'll update this page the moment it changes.