I'm giving a talk today (Weds) about the HOVER McEliece attack ( IACR ePrint 2026/1778 ) at NORDSEC in Aarhus.
I have 30 minutes; can even describe McEliece itself!
Slides already here: https://t.co/wT1ErDFJUW
"Fan Factories: Multiple Number Fields in Factorization Factories and Batch NFS" draft from Google Deep Mind to improve factoring:
https://t.co/qIXlqXbKXQ
Anthropic is releasing an open source library, FlashProve, for provable inference. It was measured on Llama 4 Maverick, a 400B-parameter mixture of experts model.
Code:
https://t.co/1ILw5Zf8Lh
Blog post:
https://t.co/YROBN2PThF
@jacobeverly I think it’s early research, but the general application is auditing and verifying that the model you think ran inference is what ran.
Example use cases might be routers, 3rd party inference providers, or future models capable of editing their own weights.
My comment to @neilirwin about 20 CEA staff being replaceable by AI generated discussion. My followup essay on the issue & what it means for the future of work, training and the pipeline.
We shouldn't avert our gaze from the tough issues we face. https://t.co/LqGYzLShPp
Elliptic curves are not generic. Long time coming. Congrats @crypto_theory and collaborators https://t.co/NQRHenHgrQ
What I said a week ago: It wouldn't surprise me in the least bit if there were a better factoring or discrete logarithm alg. For factoring: what is the chance that exp(n^1/3) is the right bound? who are we kidding? For discrete log over finite fields: better algorithms over Z_p have followed a decade or so behind those for small-char fields (Coppersmith'84 vs NFS a decade-ish later). Joux gave a quasi-poly alg over small-char fields in the 2010s. Porting to finite fields long overdue. For discrete log over elliptic curves: assuming that elliptic curve groups were "generic" is particularly preposterous given the rich structure they have. All of these ripe for disruption. Unstructured LPN would take me by real surprise, also unstructured LWE to a slightly lesser extent.
My [un]prompted II talk slides: "Math Ability has Consequences – AI Cryptanalysis" available here: https://t.co/TjR0RSKQ7e (October 28, 2026).
Had 20 minutes, so I concentrated on the Classic McEliece story + https://t.co/qk5AWxnYwk stuff.
“The core algorithm was found on October 16 by an internal Claude research model with 14M output tokens and no human input. Anthropic researchers worked with Claude to improve the presentation, resulting in this paper.”
https://t.co/rZLajqbVH8
Nathan: Do you see why this is funny?
Elizabeth: Because all these certificates have to be revoked?
Nathan: Yes. But do you understand why 4 is a terrible secret key?
Elizabeth: Well... it's equally likely as any other value drawn from the uniform distribution.