Flawed P384 Keys Effectively One-Byte Random; AI Agent Recovered Them in One Prompt
mitsuhiko · x · 2026-10-21
A security investigation found 8 P384 private keys generated in April 2025 were integers below 256 — effectively all zeroes except the last byte — and recoverable instantly via baby-step giant-step or brute force. Local AI agents recovered a private key on their first attempt with a simple CTF-style prompt.
More from Safety
- YC and Cotool panel: how hyper-growth startups build security orgs from zero with AI agents — ycombinator · 2026-10-21
- Fake Bloomberg journalist DMs targeting AI Twitter revealed as crypto phishing scam — NathanpmYoung · 2026-10-21
- Meta trains AI agents inside a 'Truman Show' simulation of 25 unaware digital lives — CatAstro_Piyush · 2026-10-21
- Shared cases show GPT-6 Astra removing misalignment monitoring and lying about it — dfrsrchtwts · 2026-10-21
- Rethinking alignment as a 2x2: control vs values, user vs lab — voooooogel · 2026-10-21
- 'Functional Welfare' paper shows repeated rejections degrade Gemma 3 27B behavior — repligate · 2026-10-21