🔍 Read the full analysis: AI, Quantum Computers And The Security Systems Supporting Modern Finance on ThorstenMeyerAI.com
Get business pricing on monitors, keyboards and dev gear
- Business-only prices and quantity discounts
- Tax-exempt purchasing
- Multiple users, one account, clear invoices
TL;DR
An October report on AI-generated mathematical work has prompted renewed discussion about whether advances in algorithms could weaken cryptographic systems, including some designed to resist quantum attacks. No cryptographic system has been shown to be broken, and experts disagree on how immediate or broad the risk is. Financial institutions still face the separate, longer-term need to prepare for quantum computers that could threaten current public-key cryptography.
According to the source material, OpenAI published the manuscripts in **372 families**, drawing on work by an unreleased internal model applied to roughly 4,000 problems. The material says the results included claims concerning well-known mathematical questions and computational improvements. Those claims require independent checking; a reported correction illustrates why publication alone does not establish that a proof is sound. OpenAI withdrew a claimed proof related to the Hodge conjecture for products of K3 surfaces after a sign error was reported.
The cryptography concern is not that the published manuscripts demonstrated an attack on banking systems. Rather, the report says computer scientists have begun testing whether AI models can find weaknesses in important protocols. Scott Aaronson, as described in the source, noted that cryptography was absent from the collection and reported that AI companies were discreetly testing their models. These are attributed accounts, not confirmation that a useful cryptographic break has been found.
The development comes as banks and governments prepare for a different threat: sufficiently capable quantum computers could use Shor’s algorithm to attack RSA and elliptic-curve public-key cryptography. NIST standardized three post-quantum cryptography standards in August 2024: **ML-KEM** for key establishment, **ML-DSA** for digital signatures and **SLH-DSA**, a hash-based signature scheme. The source raises a question about whether mathematical advances could also affect some newer assumptions, but provides no evidence that these standards have been compromised.
The old map is gone: AI mathematics, quantum computers and the cryptography holding up finance and defence
For a decade the plan was simple: elliptic curves doomed by quantum; lattices safe; hashes safe. Nothing has been broken. But a second threat has arrived that doesn’t respect those borders — AI producing new mathematics faster than any human community, against assumptions that are believed, not proven.
Now: on borrowed time — possibly shorter than the quantum countdown suggests.
Now: unproven against AI — and the destination most of the world is migrating to.
Now: reminded estimates move — BSI advised against new deployments on 1 Oct 2026.
Now: safest ground available — not a guarantee.
~n log0.9999999999999 n — a barrier many thought fundamental (OpenAI, claimed)
Overturns a half-century conjecture. Williams & Alman; key idea from an Anthropic model
“Conspicuous by its absence” (Aaronson) — labs reportedly testing crypto “gingerly and discreetly”
ECDSA could break before Q-day, “in the worst case in months not years.” Move funds to never-signed addresses. ~6M BTC sit behind exposed keys.
The new risk is the destination of the migration. Hash-only where possible; “much more paranoid” lattice params; ×10 key sizes long-term. Doesn’t recommend anyone scramble.
“No evidence whatsoever” that elliptic-curve assumptions are close to failing.
Classical breaks could reach “quantum-safe” schemes — but don’t treat a two-year scenario as a date.
Known to IBM and the NSA designing DES (~1974); public via Biham & Shamir (~1990); confirmed by Coppersmith (1994).
Invented at GCHQ — RSA- and Diffie–Hellman-equivalents — and kept secret for over two decades.
No crypto in 722 manuscripts. Found and withheld? Not posed? Posed and failed? Indistinguishable from outside.
Traffic recorded today is decrypted when a break arrives. For secrets that must last 25+ years, a break in 2035 is a break today. A state that finds one won’t announce it — it will mine its archives.
Signatures can be built from hashes. Encryption and key exchange need a trapdoor with structure — lattices, codes or group theory. Defence can only choose which structure, how much margin, how many combined.
Every date was set against quantum hardware forecasts with visible warning. The AI threat offers none.
“ML-KEM everywhere” means starting over if lattices weaken. “We can swap algorithms” doesn’t.
Blockchains show a classical break first — exposed keys and balances are public. Monitor dormant exposed addresses.
Every algorithm, key, certificate, protocol.
PQ + classical, as BSI requires.
Firmware, updates, long-term keys.
Highest sets; evaluate FrodoKEM.
More than one mathematical family; HQC coming.
Swap algorithms without rebuilding.
Forward secrecy, rotation, hidden keys.
Buterin: lost more in botched migrations than in all hacks.
Nothing has been broken, and the sceptics are right that there’s no evidence elliptic curves or lattices are about to fall. But the map has changed: elliptic curves on borrowed time, lattices unproven against AI, codes reminded that estimates move, hashes the safest ground available. For finance, intelligence and defence the answer is the same whichever threat arrives first.The quantum threat comes with a countdown. The AI threat may arrive as a silence — an empty folder where a paper should have been. The winners will be those who can change their algorithms fastest.
Why Financial Security Teams Are Watching
Modern finance depends on cryptography to authenticate transactions, establish secure connections and protect sensitive information. If the mathematical assumptions behind widely used systems were weakened, institutions could face expensive changes to software, hardware, payment infrastructure and long-lived records. The risk discussed here is **prospective, not a reported breach**: the source describes a possibility that better algorithms might alter the security picture, not an attack currently affecting banks.
The distinction matters for planning. Quantum computing presents a hardware-driven threat with indicators such as qubit development and error correction; an algorithmic breakthrough could potentially run on conventional computers and remain undisclosed. That possibility makes it harder to estimate a timeline. It does not establish that AI can currently discover, validate or operationalize an attack against financial cryptography.
For readers, the immediate issue is whether institutions can track their dependence on cryptographic standards and update systems when evidence or standards change. Payment networks, banks and public agencies often rely on infrastructure with long replacement cycles. Preparation is relevant, but the source does not support emergency claims that consumers must move funds or that financial systems are already unsafe.
quantum-resistant encryption hardware
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Quantum Migration Meets AI Research
For years, post-quantum planning has focused on replacing public-key methods that a large, fault-tolerant quantum computer could threaten. NIST’s 2024 standards provide standardized alternatives, with lattice-based methods among the central choices and a separate hash-based signature option. Such migration is a substantial engineering task: organizations need to identify where cryptography is used, test replacements and coordinate changes across vendors and systems.
The October report described mathematical work that, if verified, could challenge expectations about the speed of certain computations. The source also points to research on 3SUM by Virginia Vassilevska Williams and Josh Alman, saying an Anthropic model contributed a key idea. These examples concern algorithmic complexity; they do not by themselves show that a cryptographic protocol can be broken. Cryptographic security depends on specific problems, implementations and key sizes, not on a general claim that mathematics is advancing quickly.
Cryptocurrency brought the debate into public view because blockchains expose public keys in ways that can make potential cryptographic exposure easier to discuss. That context is not identical to banking: financial institutions use varied systems, controls and key-management practices. The source’s figures and warnings should not be treated as a direct measure of banks’ exposure.
As an affiliate, we earn on qualifying purchases.
No Cryptographic Break Has Been Shown
The source material does not identify a demonstrated AI-generated attack against RSA, elliptic-curve cryptography, ML-KEM, ML-DSA or another deployed financial standard. It also does not provide technical details sufficient to evaluate the alleged testing by AI companies, including which protocols were tested, what results were obtained or whether any findings were independently validated.
The mathematical manuscripts themselves remain subject to expert review, and at least one claim was withdrawn after an error was identified. It is unclear whether any reported algorithmic improvements can be translated into a practical attack, how much computing power such an attack would need, or whether a discovery could be kept secret. The source’s most urgent timelines are individual warnings, not established forecasts shared by the cryptographic community.
It is also unclear how directly the concerns apply to financial institutions. The source offers no inventory of banks’ cryptographic systems, no evidence of compromised financial data and no regulator’s assessment of a new immediate threat. Those gaps limit what can responsibly be concluded about current exposure.
As an affiliate, we earn on qualifying purchases.
Verification and Migration Decisions
The next meaningful developments are independent verification of the AI-related mathematical claims and publication of technical details about any cryptographic tests or results. Researchers and standards bodies would need to establish whether a proposed advance affects a specific security assumption and whether it can be implemented at practical scale. Until that evidence emerges, claims of a near-term break should remain attributed and qualified.
Financial institutions will continue to face the existing work of preparing for quantum-safe systems: locating cryptographic dependencies, coordinating with suppliers and testing standardized replacements. The source does not report a new regulatory deadline or an official change to NIST’s standards. Any revisions would depend on technical review and formal guidance, not on speculation alone.
For the public, the reporting does not establish a reason to move money or change accounts. The near-term story is a research and preparedness question: whether AI-assisted mathematics changes the assumptions that security plans rely on, and whether independent evidence can show a practical effect.
quantum computing security devices
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Key Questions
Has AI broken the encryption used by banks?
No such break is reported in the source material. It describes concerns and testing, but no verified attack on banking encryption.
How is the AI concern different from the quantum threat?
The quantum concern depends on building a sufficiently capable machine. The AI-related concern is that a new algorithm could potentially run on ordinary computers, though the source provides no confirmed example of an algorithm breaking deployed cryptography.
Are the post-quantum standards compromised?
The source raises questions about mathematical assumptions behind some newer methods, including lattice-based standards, but does not show that ML-KEM or ML-DSA has been broken. NIST standardized these methods in 2024.
Should customers change their banking or cryptocurrency accounts now?
The report does not establish a need for customers to take immediate action. Buterin’s quoted advice was not to scramble to move funds, while Drake’s remarks concerned contingency planning for exposed blockchain keys.
Source: ThorstenMeyerAI.com
Halloween Picks
halloween
As an affiliate, we earn on qualifying purchases.
