logoalt Hacker News

nicce • yesterday at 7:46 PM • 2 replies • view on HN

Maybe someone already figured it out, but it is well covered somewhere. And Claude just used it. I wonder if we ever know for sure.


Replies

whizzter • yesterday at 8:06 PM

Claude seems to be fairly good at bruteforcing/testing/etc on it's own, it solved a fairly intricate thing while I was busy on other things.

I've adapted a crypto-lib for TLS connections and had a mistake during negotation that truncated some algo-selection value, worked up until the other party started trialling post-quantum algorthims that apparently had algo-id's that collided with the truncated values I was using.

Claude figured out that from the code and trialling TLS handshakes.

Besides, since there was a bounty on finding the curve it seems unlikely that someone would've found out and not shared that? (unless working at a security service that figured out that it was possible to attack?)

tonfa • yesterday at 7:59 PM

Wouldn't they have claimed the bounty?

➕ show 1 reply