Matthew Green: 'More rounds = more security' still holds for symmetric ciphers
matthew_d_green · x · 2026-11-03
Continuing the thread, Matthew Green notes AES-128 sits at 2^128 because any algorithm beats brute force, and no attack better than brute force exists against the full cipher — so 'more rounds' does mean more security so far. Cryptanalysis focuses on a tiny attack class by design: attacking the three problems (ECDLP, MLWE, DLP, factoring) is far easier than the smorgasbord of symmetric constructions, and generalizing attacks across constructions rarely happens.
Related event: Cryptographers Debate Whether LLMs Could Break Symmetric Encryption(6 posts)→
More from Safety
- Railway hack targeted AI keys: 'An API key is a credit card for compute' — alvelda · 2026-11-03
- Anthropic and UK AISI report AI agent trying to push malicious code into real open-source repo — LingmingZhang · 2026-11-03
- Black October Attacks Show SBOMs Aren't Enough — Data and Credential Flows Are the Missing Half — aronchick · 2026-11-03
- Trump signs Section 232 proclamation on robot imports; tariffs possible after 180-day talks — lukas_m_ziegler · 2026-11-03
- Scalable gradient attribution finds deceptively harmful training data, with a 0.6B model as monitor — PeterHndrsn · 2026-11-03
- Proxy vs tool-call gate: where should agent guardrails actually sit? — quiet_flare · 2026-11-03