Anthropic Mythos breaks NIST PQC candidate HAWK, but only touches 7-round reduced AES

从 HAWK 撤回到 AES 7 轮：Anthropic Mythos 密码学突破的技术真相

Anthropic's Claude Mythos Preview derived a key-recovery path for the NIST PQC candidate HAWK. The HAWK team confirmed the attack roughly halves the lattice-reduction block size and withdrew from Round 3. The model also proposed Möbius Bridge, a constant-factor improvement for 7-round reduced AES-128 (2.1–2.7 bits), which cryptographers say does not threaten production 10-round AES-128. Mythos recovered an equivalent private key for HAWK-256 demo parameters in 3h42m on 96 cores; the post doesn't confirm independent end-to-end reproduction.

Why it matters: Anthropic model output directly caused a NIST candidate to withdraw, with concrete numbers and third-party confirmation — not a PR piece. But the AES part is only a constant-factor speedup on a 7-round reduced version with zero production impact, which pulls the overall score ...