NIST PQC Candidate HAWK Withdrawn After Security Flaw Found
An algorithm for quantum-resistant cryptography, HAWK, has been removed from consideration for a US standard after security researchers found a critical flaw. The flaw was identified using Anthropic's 'Mythos' model.
Ars Technica reports that HAWK, a digital signature scheme designed to protect against future quantum computer attacks, has been withdrawn from the US National Institute of Standards and Technology's (NIST) process for selecting post-quantum cryptography (PQC) standards. The algorithm's developer removed it after Anthropic's security model, 'Mythos,' uncovered a significant vulnerability.
HAWK had successfully passed two prior evaluation rounds conducted by NIST. These rounds involve extensive testing to assess the security of candidate PQC algorithms. The third round, from which HAWK has now been disqualified, focuses specifically on identifying the types of flaws that 'Mythos' helped to uncover.
Anthropic announced its findings on Monday. Following this announcement, the developer of HAWK confirmed on Tuesday that the algorithm would be withdrawn. This development highlights the ongoing challenges in creating robust quantum-resistant cryptography and the critical role of thorough testing in the face of evolving computational threats.