Maybe someone already figured it out, but it is well covered somewhere. And Claude just used it. I wonder if we ever know for sure.
replyClaude seems to be fairly good at bruteforcing/testing/etc on it's own, it solved a fairly intricate thing while I was busy on other things.
replyI've adapted a crypto-lib for TLS connections and had a mistake during negotation that truncated some algo-selection value, worked up until the other party started trialling post-quantum algorthims that apparently had algo-id's that collided with the truncated values I was using.
Claude figured out that from the code and trialling TLS handshakes.
Besides, since there was a bounty on finding the curve it seems unlikely that someone would've found out and not shared that? (unless working at a security service that figured out that it was possible to attack?)
Wouldn't they have claimed the bounty?
replyIf they thought it to be backdoor, why not sell for some other believer who pays more than the bounty? But anyway, not everyone is after money and fame.
reply> The main contribution is the solution that Claude came up with.
replyThat's an argument that must be infuriating to all researchers who ever published a paper on that topic, because most likely Claude was trained with all of them.
I suppose so, but it's still the case.
replyHow is that any different from a human that learned from another researcher or paper?
reply