Back to a16z Podcast

Can AI Break Cryptography? What the Experts Actually Think

a16z Podcast

Full Title

Can AI Break Cryptography? What the Experts Actually Think

Summary

The episode addresses concerns that recent AI advancements might break current cryptographic systems.

Experts clarify that while AI is rapidly improving, there's no immediate reason to panic, and existing security measures and ongoing research provide a path forward.

Key Points

  • Recent AI breakthroughs in mathematics have led to speculation that these capabilities could be applied to break cryptography, a concern amplified by a specific tweet warning the crypto industry.
  • Cryptography's security relies on the assumption that certain mathematical problems are computationally hard; AI's progress might reduce the time needed to solve these problems, thus weakening current systems.
  • The current fear is distinct from the quantum computing threat, though both target similar cryptographic systems like elliptic curves.
  • The lack of specific published cryptographic research from major AI labs using their advanced models is conspicuous and warrants investigation into whether progress was made but not shared, or if cryptography remains robust.
  • Current cryptography has survived decades of human attempts to break it, and AI's ability to solve problems doesn't inherently mean it can break secure cryptographic assumptions that may not have efficient algorithms.
  • The ability of AI to rapidly test cryptographic assumptions could actually accelerate confidence in their security if they withstand these advanced attacks, or identify weaknesses sooner than human analysis.
  • There's a recognized need for better information sharing from AI labs about their findings regarding cryptography to inform security updates and prevent undue panic.
  • The digital world has multiple layers of cryptographic defense, including standardized post-quantum cryptography and systems that already combine elliptic curves with lattices, providing resilience.
  • While AI could potentially weaken even post-quantum systems, current AI models have not demonstrated the ability to break these candidates.
  • There's an ongoing debate in the blockchain space between hash-based and lattice-based cryptography for future applications, with hash-based systems offering more agility but fewer advanced properties compared to lattices.
  • The development and deployment of AI tools for code analysis and security scanning present an opportunity to improve overall software and cryptographic security, potentially leading to fewer bugs.
  • If a critical cryptographic system were to be broken by AI, the established process involves a rapid shift to known post-quantum alternatives, a transition already underway for many internet services.

Conclusion

Cryptographic systems rely on the assumption that certain mathematical problems are hard to solve; AI's rapid advancement may shorten the time needed to break these systems, but this does not mean they are inherently breakable.

The current AI capabilities in mathematics are a powerful tool that can be used to test cryptographic assumptions, potentially increasing confidence in their security if they withstand these attacks.

While there's no immediate reason for panic, the rapid progress in AI necessitates continued vigilance, responsible information sharing from AI labs, and ongoing development and adoption of more resilient cryptographic systems.

Discussion Topics

  • How can AI's rapid advancements in mathematics be best leveraged to increase confidence in our current cryptographic systems, rather than solely focusing on the threat?
  • What are the most critical steps individuals and institutions should take to ensure their digital security in light of evolving AI capabilities and potential cryptographic vulnerabilities?
  • Beyond cryptographic systems, how might the increasing agentic properties of AI impact software security and lead to new approaches for bug detection and mitigation?

Key Terms

Cryptography
The practice and study of techniques for secure communication in the presence of third parties.
Public Key Systems
Cryptographic systems that use a pair of keys: a public key, which can be widely shared, and a private key, which must be kept secret.
Quantum Computing
A type of computation that harnesses quantum mechanics to perform calculations, potentially capable of breaking many current forms of cryptography.
Elliptic Curve Discrete Logarithm Problem (ECDLP)
A mathematical problem underlying the security of elliptic curve cryptography, widely used for secure communication.
P versus NP problem
A major unsolved problem in computer science that asks whether every problem whose solution can be quickly verified can also be quickly solved.
Lattice-based Cryptography
A type of cryptography that relies on the presumed difficulty of problems involving mathematical lattices, considered a strong candidate for post-quantum cryptography.
Hash Functions
Mathematical algorithms that convert an input of any size into a fixed-size string of characters, used for data integrity and security.
Post-Quantum Cryptography
Cryptographic algorithms that are resistant to attacks by both classical and quantum computers.
Crypto Agility
The ability of a system to easily switch cryptographic algorithms or protocols if a vulnerability is discovered or a new standard emerges.
Snark Recursion
A technique in zero-knowledge proofs where proofs are used to verify other proofs, potentially creating complex systems.

Timeline

00:00:00

Discussion about a new AI threat to cryptography and the fear that AI labs could break systems.

00:02:15

Hosts discuss the recent OpenAI breakthroughs and the ensuing industry concern, distinguishing AI threats from quantum computing.

00:03:13

The emergence of approximately 700 papers showcasing significant progress in mathematics and computer science, sparking questions about their cryptographic implications.

00:06:34

Explanation that cryptography is based on complexity assumptions (e.g., problems being hard to solve) and the potential impact of AI on these assumptions.

00:10:14

Elaboration on the broader implications of breaking elliptic curve cryptography beyond just the blockchain space.

00:11:27

Simplification of the reliance on time and expert testing in cryptography and the accelerated timeline AI introduces.

00:15:27

Clarification that the current reaction is not to new, specific cryptographic information but an indirect response to AI's general progress.

00:20:37

Discussion of the conflation between quantum threats and AI threats, and the fact that many AI concerns overlap with existing quantum preparation.

00:24:37

Exploration of the potential vulnerabilities of different cryptographic types, including hashes and lattices, to AI threats.

00:32:03

Summary of the discussion, emphasizing that the existence of an efficient algorithm to break cryptography is not a given, but AI may shorten the time to find it.

00:33:17

Discussion on how AI can be a tool to increase confidence in cryptographic systems by testing them rigorously.

00:34:02

Exploration of startup opportunities and the need for new companies to consider security assumptions in their software design due to AI.

00:35:23

The idea that AI's increasing capabilities could lead to an overall improvement in software and crypto quality, approaching zero bugs.

00:38:14

Discussion about how companies are already using AI models to scan codebases for vulnerabilities.

00:39:03

Consideration of the "what happens next" scenario if elliptic curve cryptography were definitively broken by AI.

Episode Details

Podcast
a16z Podcast
Episode
Can AI Break Cryptography? What the Experts Actually Think
Published
October 13, 2026