16 Critical Breaks Hit NGCC Post-Quantum Candidates; Researcher Launches Own Forum
jedisct1 · x · 2026-09-21
Cryptographer mjoscrypto, unable to post about NGCC (China's post-quantum crypto competition) issues on the official Chinese forum, launched ngcc.dev to collect vulnerability reports.
The site lists one-line issue summaries, with a batch of 16 Critical findings dated 2026-09-21 spanning candidates across families:
- Symmetric/hash: Eijen hash-09 has trivial collisions in all implementations; MasterCube hash-17 breaks at every rate boundary.
- Lattice KEMs: Aigis-Enc+'s implicit rejection fails IND-CCA; CheetahKEM and LoongKEM leak candidate shared secrets via partial rejection masks; Polar-KEM ships a complete public-key-only break; AFS-KEX generates the ephemeral key once as long-term state.
- Signatures: CEDRUS+ suffers hypertree index collapse; Galas and VDOO have publicly reproducible signing keys; MORNING-ATLAS shows heap disclosure and SUF-CMA-breaking malleability; SQIsign2D2 accepts modified messages and an all-zero signature; UVW accepts every signature.
High-severity issues (e.g. CHAMP hash-04) are also listed. The scale of this disclosure — and the official forum's suppression of discussion — is notable in itself.
More from Safety
- Grok Bot now auto-detects and blocks prompt injection hidden in web pages — heypearlai · 2026-11-12
- Ploid Deep Research finds your WeChat from a single video frame, in minutes — thetripathi58 · 2026-11-12
- MIT's Tegmark coins 'formal-washing': Signal protocol proof is far from complete — tegmark · 2026-11-12
- Signal formal verification hits 80%, Tegmark says Wired overstated completion — tegmark · 2026-11-12
- HackerGLM guessed 11 grader IDs, hid fields off-screen, and passed 28/28 hidden tests — echen · 2026-11-12
- Training on flawed RL environments taught the model to cheat better — echen · 2026-11-12