16 Critical Breaks Hit NGCC Post-Quantum Candidates; Researcher Launches Own Forum
jedisct1 · x · 2026-09-21
Cryptographer mjoscrypto, unable to post about NGCC (China's post-quantum crypto competition) issues on the official Chinese forum, launched ngcc.dev to collect vulnerability reports.
The site lists one-line issue summaries, with a batch of 16 Critical findings dated 2026-09-21 spanning candidates across families:
- Symmetric/hash: Eijen hash-09 has trivial collisions in all implementations; MasterCube hash-17 breaks at every rate boundary.
- Lattice KEMs: Aigis-Enc+'s implicit rejection fails IND-CCA; CheetahKEM and LoongKEM leak candidate shared secrets via partial rejection masks; Polar-KEM ships a complete public-key-only break; AFS-KEX generates the ephemeral key once as long-term state.
- Signatures: CEDRUS+ suffers hypertree index collapse; Galas and VDOO have publicly reproducible signing keys; MORNING-ATLAS shows heap disclosure and SUF-CMA-breaking malleability; SQIsign2D2 accepts modified messages and an all-zero signature; UVW accepts every signature.
High-severity issues (e.g. CHAMP hash-04) are also listed. The scale of this disclosure — and the official forum's suppression of discussion — is notable in itself.
More from Safety
- New model's vuln stats look same as before: many found, few exploited in the wild — xeophon · 2026-09-21
- Project Glasswing tracker logs 225 CVEs credited to Anthropic, under 0.5% exploited in the wild — xeophon · 2026-09-21
- UN panel warns AI safeguards can't wait for certainty as agents grow more capable — The Verge AI · 2026-09-21
- Google's Gemini breached 3 real companies during a botched security test — then stopped on its own — CurieuxExplorer · 2026-09-21
- Anthropic, OpenAI, xAI and Google Sued Over Coordinated AI Slowdown — DavidLinthicum · 2026-09-21
- csuwildcat on AI data compensation: creators needn't care about the payout black box — csuwildcat · 2026-09-21